TweakFS Zip Utility for FSX filename buffer overflow

Added: 06/24/2010 CVE: CVE-2010-1458 BID: 39565 OSVDB: 63899 Background The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities. Problem A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long,...

TweakFS Zip Utility for FSX filename buffer overflow

Added: 06/24/2010 CVE: CVE-2010-1458 BID: 39565 OSVDB: 63899 Background The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities. Problem A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long,...

Stack-Based Buffer Overflow Vulnerability in Collaboration Common Utility

Overview Collaboration Common Utility, a component of multiple Hitachi products, is vulnerable to stack-based buffer overflow when the Drag and Drop Component for Collaboration feature is also installed. Impact No details available. Solution Please refer to the 'Vendor Information' section for th...

sudo security update

CentOS Errata and Security Advisory CESA-2010:0361 An updated sudo package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

Fedora Update for aria2 FEDORA-2010-8915

Check for the Version of aria2 OpenVAS Vulnerability Test Fedora Update for aria2 FEDORA-2010-8915 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for aria2 FEDORA-2010-8908

Check for the Version of aria2 OpenVAS Vulnerability Test Fedora Update for aria2 FEDORA-2010-8908 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

FreeBSD -- Insufficient environment sanitization in jail(8)

Problem Description: The jail8 utility does not change the current working directory while imprisoning. The current working directory can be accessed by its descendants...

[SECURITY] Fedora 13 Update: kdegraphics-4.4.3-1.fc13.1

Graphics applications, including gwenview an image viewer kamera digital camera support kcolorchooser a color chooser kolourpaint4 an easy-to-use paint program kruler screen ruler and color measurement tool ksnapshot screen capture utility okular a document viewer...

[SECURITY] Fedora 12 Update: kdegraphics-4.4.3-1.fc12.1

Graphics applications, including gwenview an image viewer kamera digital camera support kcolorchooser a color chooser kolourpaint4 an easy-to-use paint program kruler screen ruler and color measurement tool ksnapshot screen capture utility okular a document viewer...

[SECURITY] Fedora 11 Update: aria2-1.9.3-1.fc11

aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...

[SECURITY] Fedora 12 Update: aria2-1.9.3-1.fc12

aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...

[SECURITY] Fedora 13 Update: aria2-1.9.3-1.fc13

aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...

Linux Mint 9 symbolic links vulnerability

mintUpdate utility symbolic links vulnerability...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

NCT Social Networking Script Cross Site Scripting

Exploit Title: XSS in NCT Jobs Portal Script Date: 25-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : ------------------------------------------------------------------------ XSS in NCT Social Networking Script Vendor:http://www.ncrypted.net/...

Stack overflow

Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X FSX allows remote attackers to execute arbitrary code via a long filename in a ZIP archive...

CVE-2010-1458

Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X FSX allows remote attackers to execute arbitrary code via a long filename in a ZIP archive...

CVE-2010-1458

The CVE-2010-1458 issue affects TweakFS Zip Utility 1.0 for Flight Simulator X (FSX). A stack-based buffer overflow is triggered by a long filename within a ZIP archive, allowing an attacker to execute arbitrary code on the affected host. Public disclosures (Corelan advisory CORELAN-10-026) and m...

CUPS < 1.4.3 Multiple Vulnerabilities

According to its banner, the version of CUPS installed on the remote host is earlier than 1.4.3. Such versions are affected by several vulnerabilities : - A pointer use-after-free vulnerability exists in the abstract file descriptor handling code in the 'cupsdDoSelect' function in...