3880 matches found
Fedora Update for libHX FEDORA-2008-7976
Check for the Version of libHX OpenVAS Vulnerability Test Fedora Update for libHX FEDORA-2008-7976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
VMware Products vmware-authd Denial of Service Vulnerability (Windows)
The host is installed with VMWare products that are vulnerable to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsdosvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Products vmware-authd Denial of Service Vulnerability Windows Authors: Chandan S Copyright:...
snmp-brute NSE Script
Attempts to find an SNMP community string by brute force guessing. This script opens a sending socket and a sniffing pcap socket in parallel threads. The sending socket sends the SNMP probes with the community strings, while the pcap socket sniffs the network for an answer to the probes. If valid...
USN-689-1: Vinagre vulnerability
Alfredo Ortega discovered a flaw in Vinagre's use of format strings. A remote attacker could exploit this vulnerability if they tricked a user into connecting to a malicious VNC server, or opening a specially crafted URI with Vinagre. In Ubuntu 8.04, it was possible to execute arbitrary code with...
openSUSE 10 Security Update : mysql (mysql-5613)
Empty bit-strings in a query could crash the MySQL server CVE-2008-3963. Due to another flaw users could access tables of other users CVE-2008-4097, CVE-2008-4098. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
php -- ini database truncation inside dba_replace() function
securityfocus research reports: A bug that leads to the emptying of the INI file contents if the database key was not found exists in PHP dba extension in versions 5.2.6, 4.4.9 and earlier. Function dbareplace are not filtering strings key and value. There is a possibility for the destruction of...
Zope Python Scripts Local Denial of Service Vulnerability
This host is running Zope, and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbzopepythonscriptsdosvulnlin.nasl 5785 2017-03-30 09:19:35Z cfi $ Zope Python Scripts Local Denial of Service Vulnerability Authors: Chandan S Copyright: Copyright c 2008 Greenbone Network...
CVE-2008-5076
htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."...
Design/Logic Flaw
htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."...
CVE-2008-5076
htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."...
SuSE 10 Security Update : MySQL (ZYPP Patch Number 5618)
Empty bit-strings in a query could crash the MySQL server. CVE-2008-3963 Due to another flaw users could access tables of other users. CVE-2008-4097 / CVE-2008-4098 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...
CVE-2007-6432
Adobe PageMaker 7.0.1/7.0.2 is affected by a stack-based buffer overflow in AldFs32.dll when parsing PMD files, enabling arbitrary code execution via a crafted PMD file. The issue is described as a remote code execution vulnerability with user-assisted access (the attacker must entice the user to...
apcupsd < 3.8.6 / 3.10.x < 3.10.5 Multiple Vulnerabilities
apcupsd is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apc:apcupsd"; ifdescription...
WordNet: Execution of arbitrary code
Background WordNet is a large lexical database of English. Description Jukka Ruohonen initially reported a boundary error within the searchwn function in src/wn.c. A thorough investigation by the oCERT team revealed several other vulnerabilities in WordNet: Jukka Ruohonen and Rob Holland oCERT...
Gentoo Security Advisory GLSA 200701-18 (xine-ui)
The remote host is missing updates announced in advisory GLSA 200701-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200701-24 (vlc)
The remote host is missing updates announced in advisory GLSA 200701-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200701-18 (xine-ui)
The remote host is missing updates announced in advisory GLSA 200701-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200701-24 (vlc)
The remote host is missing updates announced in advisory GLSA 200701-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
[SECURITY] Fedora 8 Update: libHX-1.23-1.fc8
A library for: - rbtree with key-value pair extension - deques double-ended queues Stacks LIFO / Queues FIFOs - platform independent opendir-style directory access - platform independent dlopen-style shared library access - auto-storage strings with direct access - command line option argv parser...
Ubuntu 7.10 / 8.04 LTS : yelp vulnerability (USN-638-1)
Aaron Grattafiori discovered that the Gnome Help Viewer did not handle format strings correctly when displaying certain error messages. If a user were tricked into opening a specially crafted URI, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network...