185 matches found
CURL-CVE-2010-3842 local file overwrite
curl offers a command line option --remote-header-name also usable as -J which uses the filename of the Content-disposition: header when it saves the downloaded data locally. curl attempts to cut off the directory parts from any given filename in the header to only store files in the current...
Novell iPrint Client Multiple BOF Vulnerabilities (Windows)
This host is running Novell iPrint Client and is prone to multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelliprintclientmultbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell iPrint Client Multiple BOF Vulnerabilities Windows Authors: Sujit Ghosal...
Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities (974571)
This host is missing a critical security update according to Microsoft Bulletin MS09-056. OpenVAS Vulnerability Test $Id: secpodms09-056.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows CryptoAPI X.509 Spoofing Vulnerabilities 974571 Authors: Sharath S Updated By: Madhuri D on 2010-11-...
McAfee GroupShield for Exchange X-Header Security Bypass Vulnerability
This host is installed McAfee GroupShield for Microsoft Exchange and is prone to X-Header Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: gbmcafeegroupshieldexchangesecbypassvuln.nasl 8197 2017-12-20 12:50:38Z cfischer $ McAfee GroupShield for Exchange X-Header Security Bypass...
Microsoft Excel Remote Code Execution Vulnerabilities (968557)
This host is missing a critical security update according to Microsoft Bulletin MS09-009. OpenVAS Vulnerability Test $Id: secpodmsexcelremotecodeexecvuln.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Excel Remote Code Execution Vulnerabilities 968557 Authors: Sujit Ghosal Update description...
Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
This host is missing a critical security update according to Microsoft Bulletin MS09-005. OpenVAS Vulnerability Test $Id: secpodms09-005.nasl 5346 2017-02-19 08:43:11Z cfi $ Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution 957634 Authors: Chandan S Copyright c 2009...
Microsoft Internet Explorer Clickjacking Vulnerability
This host has installed Internet Explorer and is prone to clickjacking vulnerability OpenVAS Vulnerability Test $Id: gbmsieclickjackingvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Clickjacking Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...
Brk vulnerability analysis and remediation-vulnerability and early warning-the black bar safety net
Brk vulnerability analysis and patching brk vulnerability analysis A little out of date music at: I hope everyone also can be a little. Brk vulnerability analysis by icbm@0x557 1. brk loopholes in the background 2. The vulnerability principle analysis 3. Exploit analysis 4. The vulnerability is...
Microsoft Security Bulletin MS08-018 – Critical Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)
Microsoft Security Bulletin MS08-018 – Critical Vulnerability in Microsoft Project Could Allow Remote Code Execution 950183 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office Project that...
[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-04:13.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:13.linux Security Advisory The FreeBSD Project Topic: Linux binary compatibility mode input validation error Category: core Module: kernel Announced: 2004-06-3...
Mac OS X Finder creates world-readable ".FBCIndex" file thereby disclosing sensitive information
Overview Mac OS X's Find-By-Content indexing may store file data where it can be served to remote users by Apache. Description The Find-By-Content feature of Mac OS X generates indexing data from the contents of files in each directory. It then stores the indexing data for each directory in a...
hosting.controller.txt
Hi, Here's my new advisory about Hosting Controller. Phuong Hosting Controller - Multiple vulnerabilities Date: 01/04/2002 Summary ------- Hosting Controller is an all-in-one administrative hosting tool for Windows. It automates a wide range of hosting tasks and provides control of each hosted si...
SCO 5.0.6 issues (lpadmin)
====================================================================== Strategic Reconnisiance Team Security AdvisorySRT2001-07 Topic: SCO 5.0.6 issues lpadmin Vendor: SCO Release Date: 03/27/01 ====================================================================== .: Description SCO OpenServer...
Glibc Local Root Exploit
Hi all, This has been bouncing around on vuln-dev and the debian-devel lists. It effects glibc = 2.1.9x and it would seem many if not all OSes using these versions of glibc. Ben Collins writes, "This wasn't supposed to happen, and the actual fix was a missing comma in the list of secure env vars...
bindview.naptha.txt
The NAPTHA DoS vulnerabilities Issue Date: 30 November 2000 Updated: 18 December 2000 Contact: Robert Keyes Topic: Network DoS vulnerabilities Overview: A set of network DoS vulnerabilities has been discovered, and the name NAPTHA is being used to describe them as a group. The NAPTHA...
