Ubuntu: Security Advisory (USN-740-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-740-1: NSS vulnerability

The MD5 algorithm is known not to be collision resistant. This update blocklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/...

Dissect ActiveX hung it: to install the name of the invasion-bug warning-the black bar safety net

Once Upon a time, the use of ActiveX is a rogue software“kill”the main technical means of nowadays malware mostly all dead now, can ActiveX and do not exit People's field of vision, web hang horse took a fancy to it, so ActiveX hung it to pop up and become the important several hung it. The North...

CURL-CVE-2009-0037 Arbitrary File Access

When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...

Fedora Core 10 FEDORA-2009-1291 (nss)

The remote host is missing an update to nss announced via advisory FEDORA-2009-1291. OpenVAS Vulnerability Test $Id: fcore20091291.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1291 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 9 : nss-3.12.2.0-2.fc9 (2009-1276)

This updates adds protection against rogue CA that was generated as a proof-of- concept of the MD5 collision attacks against X509 signatures: http://www.win.tue.nl/hashclash/rogue-ca/ , related to CVE-2004-2761. Note that Tenable Network Security has extracted the preceding description block...

Applications can open up remote root access on G1 Phone

Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...

Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)

Crashing ZoneAlarm 8.0.020.000 by Checkpoint Component : TrueVector ========================================== - Keep ZoneALarm 8 running with vsmon.exe running which runs by default - On System A : Run the rogue proxy attached zacrasherproxy.exe and set a port number eg: zacrasherproxy.exe 5938 ...

MS08-054: Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)

The remote host is running Windows Media Player 11. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, the attacker would need to set up a rogue audio file and send it to a victim on the...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

MS08-012: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (947085)

The remote host is running a version of Microsoft Publisher that may allow arbitrary code to be run on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the font parsing handler would result in code execution. ...

MS07-068: Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 / 944275)

The remote host is running Windows Media Player/Service. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue ASF file and send it to a victim on t...

IBM Director fails to properly time-out connection requests from clients

Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...

CVE-2003-1446

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

CVE-2003-1446

CVE-2003-1446 describes a buffer overflow in the Rogue 5.2-2 save_into_file function (save.c). The flaw allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde (~) in the path. Affected p...

CVE-2003-1446: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

CVE-2007-4508

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query...

CVE-2007-4508

CVE-2007-4508 describes a stack-based buffer overflow in the Rebellion Asura engine used by Rogue Trooper 1.0 (and earlier) and Prism 1.1.1.0 (and earlier). The overflow occurs via a long string in a 0xf007 packet for the challenge B query, allowing remote code execution. The affected component i...

CVE-2007-4508: Undefined Security Weakness

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query...

Buffer-overflow in the Asura engine

Luigi Auriemma Application: Asura engine network SDK http://www.rebellion.co.uk Games: Rogue Trooper = 1.0 Prism: Guard Shield = 1.1.1.0 ...possibly others... Platforms: Windows Bug: challenge buffer-overflow Exploitation: remote, versus server in-game Date: 22 Aug 2007 Author: Luigi Auriemma...