9572 matches found
Red Hat Enterprise Linux seunshare Unsafe Implementation
Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from policycore-utils intended to make new filesystem...
Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection
source: https://www.securityfocus.com/bid/46366/info Smarty Template Engine is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the webserver process. This may facilitate a compromise of the applicati...
Wireshark MAC-LTE dissector Buffer Overflow Vulnerability (Windows)
This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkmacltedissectorbofvulnwin.nasl 6519 2017-07-04 14:08:14Z cfischer $ Wireshark MAC-LTE dissector Buffer Overflow Vulnerability Windows Authors: Sooraj KS Copyright:...
SuSE 10 Security Update : XEmacs (ZYPP Patch Number 6413)
Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xeamcs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...
SAP RFC EPS_DELETE_FILE — Authorisation bypass, smbrelay
Application: SAP NetWeaver ABAP Versions Affected: SAP NetWeaver ABAP Vendor URL: http://www.sap.com Bugs:Auth bypass, directory traversal, smbrelay Exploits: YES Reported: 15.01.2011 Vendor response: 25.01.2011 Date of Public Advisory: 22.08.2011 Author: Alexey Sintsov Description Security...
BlogEngine.NET Unauthorized Access / Directory Traversal
Product: BlogEngine.NET Vendor informed: 24 Sep 2010 Fixed Version Released: 01 Jan 2011 Affected Versions: 1.6.x and prior versions Severtiy: Critical Impact: Information Discloure and System Compromise Description: BlogEngine.NET is an open source .NET blogging project that was born out of desi...
Microsoft WMI Administrative Tools ActiveX Control RCE Vulnerabilities
Microsoft WMI Administrative Tools is prone to multiple remote code execution RCE vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900281. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced...
Secunia Research: Microsoft Office TIFF Image Converter Endian Conversion Vulnerability
====================================================================== Secunia Research 14/12/2010 - Microsoft Office TIFF Image Converter - - Endian Conversion Vulnerability - ====================================================================== Table of Contents Affected...
Hewlett-Packard Power Manager Administration Web Server Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Power Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of URL parameters when posting to the login form of the web bas...
Secunia Research: QuickTime Track Dimensions Buffer Overflow Vulnerability
====================================================================== Secunia Research 08/12/2010 - QuickTime Track Dimensions Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
RealNetworks RealPlayer ICY Protocol StreamTitle Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerability installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must open a malicious SHOUTcast Stream. The specific flaw exists in the processing of the...
RealNetworks RealPlayer Cook Audio Codec Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious media file. The specific flaw exists in the...
RealNetworks RealPlayer RTSP GIF Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious media file. The specific flaw exists in the...
ProFTPD 1.3.3c compromised source remote root Trojan
Exploit for php platform in category remote exploits ==================================================== ProFTPD 1.3.3c compromised source remote root Trojan ==================================================== == ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC...
SuSE 11 / 11.1 Security Update : freetype2 (SAT Patch Numbers 2914 / 2919)
This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...
Secunia Research: Winamp NSV Table of Contents Parsing Integer Overflow
====================================================================== Secunia Research 30/11/2010 - Winamp NSV Table of Contents Parsing Integer Overflow - ====================================================================== Table of Contents Affected...
Awstats < 7.0 Configuration File Remote Arbitrary Command Execution Vulnerability
Awstats is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Winamp VP6 Content Parsing Buffer Overflow Vulnerability
Winamp is prone to heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 14 : proftpd-1.3.3c-1.fc14 (2010-17091)
This is an update to the current upstream maintenance release, which addresses two security issues that can be exploited by malicious users to manipulate certain data and compromise a vulnerable system. - A logic error in the code for processing user input containing the Telnet IAC Interpret As...
Secunia Research: Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability
====================================================================== Secunia Research 29/10/2010 - Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability - ====================================================================== Table of Contents Affected...