Quicktime < 7.1.6 quicktime.util.QTHandleRef toQTPointer Method Arbitrary Code Execution (Mac OS X)

According to its version, the installation of Quicktime on the remote Mac OS X host which contains a bug which might allow a rogue Java program to write anywhere in the heap. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by luring a victim into...

XAMPP ADOdb mssql_connect Remote Buffer Overflow

The remote host is running XAMPP, an Apache distribution containing MySQL, PHP, and Perl. It is designed for easy installation and administration. The remote version of XAMPP includes a PHP interpreter that is affected by a buffer overflow involving calls to 'mssqlconnect' as well as an example P...

WebSpeed Workshop Arbitrary Command Execution

The remote web server appears to be using WebSpeed, a website creation language used with database-driven websites. The installation of WebSpeed on the remote host is configured to operate in 'Development' mode and allows access to the WebSpeed Workshop, an environment intended for developing...

QuickTime < 7.1.6 Multiple Vulnerabilities

Binary data 3975.prm...

GLSA-200704-08 : DokuWiki: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200704-08 DokuWiki: XSS vulnerability DokuWiki does not sanitize user input to the GET variable 'media' in the fetch.php file. Impact : An attacker could entice a user to click a specially crafted link and inject CRLF characters...

pl-PHP Beta 0.9 - Multiple Vulnerabilities

pl-PHP Beta 0.9 - Multiple Vulnerabilities . . . . | . .| . .;/ || Infos --------- Date : 2007-04-10 Product : pL-PHP Version : beta 0.9 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/pl-php/ - http://www.karlcore.com/programming/blog/ Vendor Status : 2007-04-10 -...

GLSA-200704-07 : libwpd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-07 libwpd: Multiple vulnerabilities libwpd contains heap-based overflows in two functions that convert WordPerfect document tables. In addition, it contains an integer overflow in a text-conversion function. Impact : An...

Sun OpenOffice.org < 2.2 Multiple Vulnerabilities

The remote host is running a version of Sun Microsystems OpenOffice.org that is prior to version 2.2. It is, therefore, affected by a stack-based buffer overflow vulnerability in its handling of StarCalc documents. If a remote attacker can trick a user into opening a specially crafted StarCalc...

Yahoo! Messenger AudioConf ActiveX Control (yacscom.dll) Multiple Property Overflow

The remote host contains a version of the 'AudioConf' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host has a buffer overflow triggered by calling the control's 'createAndJoinConference' method with large values for the 'socksHostname' and...

TestDirector (TD) for Mercury Quality Center SPIDERLib.Loader ActiveX Control (Spider90.ocx) ProgColor Property Overflow (2)

The remote host is running Mercury Quality Center, a web-based solution for automatic software testing. The version of Quality Center installed on the remote host hosts an ActiveX control affected by a buffer overflow vulnerability and will serve up a copy of that control if a connecting client...

Link Layer Topology Discovery (LLTD) Detection

The remote host responds to the LLTD Link Layer Topology Discovery protocol. This protocol can be used to enumerate the IPv4 and IPv6 addresses of a remote host, its name, the characteristics of the physical layer it is connected to, as well as the topology of the network, etc... This plugin...

FrontBase FBExec Process Detection

There is a FrontBase FBExec process listening on the remote host. This service brokers connections from network clients to FrontBase database processes running on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

CVE-2007-1528

The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships, into the network topology map by using a MAC address that differs from the MAC address provided in the Real Source field of the LLTD BASE header of a HELLO packet, aka the "Spo...

LedgerSMB / SQL-Ledger file Parameter Multiple Vulnerabilities

The remote host is running LedgerSMB or SQL-Ledger, a web-based double-entry accounting system. The version of LedgerSMB or SQL-Ledger on the remote host fails to properly sanitize the 'file' parameter of the 'am.pl' script before using it in various template routines in the 'AM.pm' module. An...

Ipswitch IMail Server < 2006.2 Multiple Remote Overflows

The remote host is running Ipswitch Collaboration Suite / IMail, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail installed on the remote host has several unspecified buffer overflows in various service...

Cafe free line, Account Card money own plus-vulnerability warning-the black bar safety net

| Currently, the cafe became a student of the Internet“playful”, whenever school time comes, everyone is like“rush”and ran to the cafe to grab a machine with Internet access, but the long down, the summary is calculated to the Internet overhead, but makes all the students feel bad endless. But th...

Trend Micro ServerProtect Detection

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

DjVu Browser Plug-in < 6.1.1 Multiple Buffer Overflows

The DjVu Browser Plug-in is installed on the remote Windows host. This plugin provides the primary means of viewing DjVu documents, which are used for publishing scanned books, catalogs, historical documents, research papers, manuals, etc. The version of the DjVu Browser Plug-in installed on the...

SUSE-SA:2006:042: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:042 kernel. The Linux kernel has been updated to fix several security issues. This advisory refers to kernel updates for SUSE Linux 9.1 - 10.1. The SUSE Linux 9.1 kernel update is the final SUSE Linux 9.1 YOU update see separate...

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...