CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

HP OpenView Data Protector Application Recovery Manager Buffer Overflow (CVE-2009-3844)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

Zabbix < 1.6.8 Multiple Vulnerabilities

Binary data 5270.prm...

Update Protection against Oracle Document Capture EasyMail IMAP4 LicenseKey Buffer Overflow

A buffer overflow vulnerability exists in Oracle Document Capture which is integrated with Oracle Imaging and Process Management and Oracle Universal Content Management products. The vulnerability is due to a boundary error while parsing the LicenseKey property within the EasyMail IMAP4 ActiveX...

MailEnable POP3 Service PASS Command Buffer Overflow (CVE-2006-6605)

MailEnable is an email server suite for the Microsoft Windows platform. The product supports various email transfer protocols such as SMTP, POP3 and IMAP. The MailEnable protocol handlers are installed as individual services on the system, called Connectors. There exists a stack-based buffer...

AST-2009-008: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-008 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SIP responses expose valid usernames |...

IPSwitch WS_FTP Logging Server Daemon Denial of Service (CVE-2007-3823)

The Ipswitch WSFTP server is a full featured secure File Transfer Protocol FTP server complete with several optional authentication mechanisms, encryption and data access controls. It is fully compliant with the File Transfer Protocol specifications. There exists a denial of service vulnerability...

AST-2009-006: IAX2 Call Number Resource Exhaustion

Asterisk Project Security Advisory - AST-2009-006 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | IAX2 Call Number Resource Exhaustion |...

AST-2009-005: Remote Crash Vulnerability in SIP channel driver

Asterisk Project Security Advisory - AST-2009-005 +------------------------------------------------------------------------+ | Product | Asterisk | |---------------------+--------------------------------------------------| | Summary | Remote Crash Vulnerability in SIP channel driver |...

Cyrus-SASL: Execution of arbitrary code

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact A remote...

GLSA-200904-09 : MIT Kerberos 5: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200904-09 MIT Kerberos 5: Multiple vulnerabilities Multiple vulnerabilities have been reported in MIT Kerberos 5: A free call on an uninitialized pointer in the ASN.1 decoder when decoding an invalid encoding CVE-2009-0846. A buff...

Mandriva Update for krb5 MDKSA-2007:174-1 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDKSA-2007:174-1 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for samba MDKSA-2007:244 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:244 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for samba MDKSA-2007:244 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:244 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for krb5 MDKSA-2007:174 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDKSA-2007:174 krb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

git: Multiple vulnerabilties

Background GIT - the stupid content tracker, the revision control system used by the Linux kernel team. Description Multiple vulnerabilities have been reported in gitweb that is part of the git package: Shell metacharacters related to gitsearch are not properly sanitized CVE-2008-5516. Shell...

RedHat Update for samba RHSA-2007:1114-01

Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2007:1114-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CentOS Update for samba CESA-2007:1114-01 centos2 i386

Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2007:1114-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Vulnerabilities in SMB Could Allow Remote Code Execution (958687)

This host is missing a critical security update according to Microsoft Bulletin MS09-001. OpenVAS Vulnerability Test $Id: secpodms09-001.nasl 5363 2017-02-20 13:07:22Z cfi $ Vulnerabilities in SMB Could Allow Remote Code Execution 958687 Authors: Chandan S Copyright c 2009 SecPod,...

Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to trigger a denial of service condition on vulnerable installations of Microsoft Windows; remote code execution is also theoretically possible. User interaction is not required to exploit this vulnerability. The specific flaw exists in the processing of...