TmaxSoft JEUS - Alternate Data Streams File Disclosure

Title: TmaxSoft JEUS Alternate Data Streams Vulnerability Author: Simon Ryeobar4mi at gmail Severity: High Impact: Remote File Disclosure Vulnerable Version: JEUS 5: Fix26 on NTFS References: - http://www.microsoft.com/technet/security/bulletin/ms98-003.mspx - http://www.tmaxsoft.com -...

DEBIAN-CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

BitDefender - Module pdf.xmd Infinite Loop Denial of Service (PoC)

BitDefender - Module pdf.xmd Infinite Loop Denial of Service PoC Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publicatio...

Easy File Sharing Web Server Information Disclosure

The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially-crafted request to the web server, an attacker may be able to access privileged information. SPDX-FileCopyrightText: 2008 Justin...

Gentoo Security Advisory GLSA 200801-12 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200801-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-05:18.zlib.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:18.zlib.asc ADV FreeBSD-SA-05:18.zlib.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SuSE 10 Security Update : vorbis-tools (ZYPP Patch Number 5193)

Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2008-2418

Race condition in the STREAMS Administrative Driver sad in Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors...

Race condition

Race condition in the STREAMS Administrative Driver sad in Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors...

CVE-2008-2418

Race condition in the STREAMS Administrative Driver sad in Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors...

CVE-2008-2418

CVE-2008-2418 is a vulnerability in the Solaris 10 STREAMS Administrative Driver (sad) caused by a race condition. The affected component is the STREAMS Administrative Driver on Sun Solaris 10, with local users able to trigger a denial of service (kernel panic) via unknown vectors. The root cause...

CVE-2008-0836

Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service panic via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319...

CVE-2008-0836

CVE-2008-0836 describes an unspecified vulnerability in the vuidmice STREAMS modules on Sun Solaris 8–10 (x86) that allows local users to cause a denial of service (panic) via vectors triggering a NULL pointer dereference in the vuid3ps2 module. The issue is categorized as a local access problem ...

CVE-2008-0718

Unspecified vulnerability in the USB Mouse STREAMS module usbms in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service panic via unspecified vectors...

CVE-2008-0718

The CVE-2008-0718 entry concerns Sun Solaris 9/10 where the USB Mouse STREAMS module (usbms) is vulnerable when 64-bit mode is enabled. The vulnerability allows local users to cause a denial of service (panic) via unspecified vectors. The NVD notes a CVSS v2 base score of 4.7 (Medium) with local ...

Debian Security Advisory DSA 1472-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1472-1. OpenVAS Vulnerability Test $Id: deb14721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1472-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

SwiftView Viewer Plugin < 8.3.5 Buffer Overflow

A SwiftView Viewer ActiveX control and/or browser plug-in is installed on the remote Windows host. SwiftView Viewer is an application for viewing and printing print streams. According to its version, the SwiftView ActiveX control / browser plug-in currently installed is affected by a stack-based...

GLSA-200801-12 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200801-12 xine-lib: User-assisted execution of arbitrary code Luigi Auriemma reported that xine-lib does not properly check boundaries when processing SDP attributes of RTSP streams, leading to heap-based buffer overflows. Impact ...

openSUSE 10 Security Update : xine-devel (xine-devel-4917)

Specially crafted rtsp-Streams could cause a buffer overflow in xine. Attackers could potentially exploit that to execute arbitrary code CVE-2008-0225. Additionally a security update of xorg-x11 revealed a bug in xine-ui. The xine user interface didn't display properly due to that. %NASLMINLEVEL...