2996 matches found
(0Day) HP StorageWorks File Migration Agent RsaCIFS.dll Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP StorageWorks File Migration Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HsmCfgSvc.exe service which listens by default on TCP port...
(0Day) HP StorageWorks File Migration Agent RsaFTP.dll Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP StorageWorks File Migration Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HsmCfgSvc.exe service which listens by default on TCP port...
USN-1482-1: ClamAV vulnerabilities
It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create a specially-crafted TAR file containing malware that could escape being detected. CVE-2012-1457, CVE-2012-1459 It was discovered that ClamAV incorrectly handled certain malformed CHM...
CVE-2012-2352
The archive management arcmanage page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the 1 doarcmanage, 2 doarcdownload, or 3 doarcdelete functions...
UBUNTU-CVE-2012-2352
The archive management arcmanage page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the 1 doarcmanage, 2 doarcdownload, or 3 doarcdelete functions...
CVE-2012-2352
The archive management arcmanage page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the 1 doarcmanage, 2 doarcdownload, or 3 doarcdelete functions...
Debian Security Advisory DSA 2477-1 (sympa)
The remote host is missing an update to sympa announced via advisory DSA 2477-1. OpenVAS Vulnerability Test $Id: deb24771.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2477-1 sympa Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
[SECURITY] [DSA 2477-1] sympa security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2477-1 [email protected] http://www.debian.org/security/ Florian Weimer May 20, 2012 http://www.debian.org/security/faq -...
Path traversal
Absolute path traversal vulnerability in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a...
CVE-2012-2421
CVE-2012-2421 describes an absolute path traversal vulnerability in the Intuit QuickBooks Help System (HelpAsyncPluggableProtocol.dll) used by the intu-help-qb handlers. Affected products are QuickBooks 2009–2012 when Internet Explorer is used. The issue could allow an attacker to read arbitrary ...
CVE-2012-2421
Absolute path traversal vulnerability in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a...
DEBIAN-CVE-2011-1778
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TAR archive...
[SECURITY] Fedora 17 Update: libzip-0.10.1-1.fc17
libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...
Fedora Update for perl-PAR FEDORA-2011-16856
Check for the Version of perl-PAR OpenVAS Vulnerability Test Fedora Update for perl-PAR FEDORA-2011-16856 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
libzip: Multiple vulnerabilities
Background libzip is a library for manipulating zip archives. Description Two vulnerabilities have been found in the "zipreadcdir" function in zipopen.c of libzip: An incorrect loop construct, which could cause a heap-based buffer overflow CVE-2012-1162. An integer overflow, which may not restric...
SA-CONTRIB-2012-026 - ZipCart - Access bypass
CVE: CVE-2012-1650 ZipCart enables a site to provide users with Zip archives for downloads selected by the user. Versions of ZipCart prior to 6.x-1.4 checks an incorrect permission when building archives. This vulnerability is mitigated by the fact that archive file addition is only permitted if...
sos: sosreport is gathering certificate-based RHN entitlement private keys
The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes 1 Certificate-based Red Hat Network private entitlement keys and the 2 private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive...
Fedora Update for perl-PAR FEDORA-2011-16859
Check for the Version of perl-PAR OpenVAS Vulnerability Test Fedora Update for perl-PAR FEDORA-2011-16859 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for cacti FEDORA-2011-17049
Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2011-17049 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...