4288 matches found
MS03-011: Flaw in Microsoft VM (816093)
The remote host is running a Microsoft VM machine that has a bug in its bytecode verifier that could allow a remote attacker to execute arbitrary code on this host with the privileges of the user running the VM. To exploit this vulnerability, an attacker would need to send a malformed applet to a...
Popcorn vulnerabilities
Application: Popcorn http://www.ultrafunk.com Version: All the version, because it is no more supported however the latest is 1.20 Bug: Multiple vulnerabilities Risk: Remote DoS Author: Auriemma Luigi e-mail: [email protected] 1 Introduction 2 Bug 3 The Code 4 Fix 5 Philosophy --- 1...
Oliver Debon Flash plug-in vulnerable to buffer overflow processing incorrectly formatted sound file
Overview When passed an incorrectly formatted sound file, the Oliver Debon freeware Flash plug-in is reportedly vulnerable to a buffer overflow. Description The DefineSound tag in a sound file passes data to a Flash plug-in. If this tag specifies fewer samples than are actually present in the dat...
Option to VERITAS Cluster Server (VCS) lltstat command will panic system.
I had a hell of a time getting through to Veritas, but after I did they reacted VERY quickly. I apologize that I didn't get this info out to the general community sooner, but Veritas didn't tell me that they released the fix. In the name of full disclosure: synopsis: "When using VERITAS Cluster...
[SECURITY] New Debian xmcd packages released
Package: xmcd Vulnerability: untrustworthy privileged binaries Debian-specific: yes Vulnerable: yes The Debian GNU/Linux xmcd package has historically installed two setuid helpers for accessing cddb databases and SCSI cdrom drives. More recently, the package offered the administrator the chance t...
Re: An Analysis of the TACACS+ Protocol and its Implementations
-----BEGIN PGP SIGNED MESSAGE----- Hello, We acknowledge that a buffer overflow mentioned in the analysis by Solar Designer is indeed present in an unsupported free version of TACACS+ server officially it is a "developer's kit" and can be found at...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
