5480 matches found
CVE-2016-1569
FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...
Design/Logic Flaw
FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...
CVE-2016-1569
FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...
CVE-2016-1569
CVE-2016-1569 affects Firebird 2.5.5. Remote authenticated users can trigger a denial of service (daemon crash) by using the service manager to invoke the gbak utility with an invalid parameter. The issue is linked to gbak command handling, enabling DoS when a specially crafted gbak invocation is...
Apple OS X Directory Utility Privilege Gain Vulnerability
Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the Directory Utility in Apple OS X 10.11.0 and earlier versions, which arises from the program failing to properly handle authentication for new sessions. A local attacker could...
KLA10741 Denial of service vulnerability in FireBird
Improper commands usage at RDBMS was found in FireBird. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via vectors related to gbak utility. Technical details This vulnerability related to unhandled case exception at...
CVE-2015-6980
Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...
CVE-2015-6980
Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...
CVE-2015-6980
CVE-2015-6980 affects Apple OS X Directory Utility. OS X 10.11.0 and earlier mishandle authentication for new sessions, enabling local privilege escalation by a local attacker. Affected: Directory Utility in OS X before 10.11.1 (per CNVD entry and NVD description). Mitigation: upgrade to OS X 10....
TCP Profiles on NetScaler
TCP configurations for a NetScaler appliance can be specified in an entity called a TCP profile, which is a collection of TCP settings. The TCP profile can then be associated with services or virtual servers that want to use these TCP configurations. Built-in TCP Profiles For convenience of...
Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)
Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow. Date : 01/08/2016 Author: TOMIWA. Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Software: Konica Minolta FTP Utility v1.0 Tested: Windows 7 SP1 64bits Listen for a reverse netcat connection...
IBM Installation Manager and Packaging Utility Elevation of Privilege Vulnerability
IBM Installation Manager and Packaging Utility are both products of IBM America. The former is a set of general software management tools that can run on a variety of platforms such as IBM i, OS, Windows, Linux, Unix, and the latter is a set of free repository and package management tools. A...
CVE-2015-7442
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value...
Code injection
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value...
CVE-2015-7442
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value...
KDE Systemsettings: Privilege escalation
Background KDE workspace configuration module for setting the date and time has a helper program which runs as root for performing actions. Description KDE Systemsettings fails to properly validate user input before passing it as argument in context of higher privilege. Impact A local attacker...
Coinbase: Potential for Double Spend via Sign Message Utility
Hi, There is an unlikely but theoretically exploitable vulnerability is caused by allowing users to sign messages with their addresses. So far I have not been able to exploit this, but I believe that it is exploitable. On coinbse.com, the user can see a list of their addresses here. When they cli...
giflib -- heap overflow
Hans Jerry Illikainen reports: A heap overflow may occur in the giffix utility included in giflib-5.1.1 when processing records of the type IMAGEDESCRECORDTYPE' due to the allocated size of LineBuffer' equaling the value of the logical screen width, GifFileIn-SWidth', while subsequently having...
[SECURITY] Fedora 22 Update: LibRaw-0.16.2-3.fc22
LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...
