Samba receive_smb_raw SMB Packets Parsing Buffer Overflow (CVE-2008-1105)

Samba is an open-source implementation of the network services suite SMB/CIFS Server Message Block/Common Internet File System. A buffer overflow vulnerability has been reported in Samba. The vulnerability is due to a boundary error in the "receivesmbraw" function when Samba parses SMB packets. A...

streamripper -- multiple buffer overflows

Secunia reports: A boundary error exists within httpparsescheader in lib/http.c when parsing an overly long HTTP header starting with "Zwitterion v". A boundary error exists within httpgetpls in lib/http.c when parsing a specially crafted pls playlist containing an overly long entry. A boundary...

Trend Micro OfficeScan CGI Parsing Buffer Overflow Vulnerability

This host is installed with Trend Micro OfficeScan and is prone to stack based buffer overflow vulnerability. The vulnerability is due to boundary error in the CGI modules when processing specially crafted HTTP request. OpenVAS Vulnerability Test $Id:...

VLC Media Player TY Processing Buffer Overflow Vulnerability (Windows)

This host is installed with VLC Media Player and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayertybofvulnwin.nasl 5370 2017-02-20 15:24:26Z cfi $ VLC Media Player TY Processing Buffer Overflow Vulnerability Windows Authors: Veerendra GG Copyright:...

GuildFTPd CWD and LIST Command Heap Overflow Vulnerability

GuildFTPd FTP Server is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Web Proxy Server < 4.0.8 Multiple Vulnerabilities - Linux

Sun Java Web Proxy Server is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Message Queuing Remote Code Execution Vulnerability (951071)

This host is missing important security update according to Microsoft Bulletin MS08-065. OpenVAS Vulnerability Test $Id: secpodms08-065900224.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Message Queuing Remote Code Execution Vulnerability 951071 Authors: Veerendra GG Copyright: Copyright C...

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities - Windows

Apple QuickTime is prone to multiple arbitrary code execution vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Windows Media Encoder 9 Remote Code Execution Vulnerability (954156)

This host is missing a critical security update according to Microsoft Bulletin MS08-053. OpenVAS Vulnerability Test $Id: secpodms08-053900044.nasl 5863 2017-04-05 07:38:11Z antu123 $ Description: Windows Media Encoder 9 Remote Code Execution Vulnerability 954156 Authors: Chandan S Copyright:...

Pan: User-assisted execution of arbitrary code

Background Pan is a newsreader for the GNOME desktop. Description Pavel Polischouk reported a boundary error in the PartsBatch class when processing .nzb files. Impact A remote attacker could entice a user to open a specially crafted .nzb file, possibly resulting in the remote execution of...

Novell iPrint Client ActiveX Control Stack Buffer Overflow (CVE-2008-2908)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A stack buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To trigger...

BitchX: Multiple vulnerabilities

Background BitchX is an IRC client. Description bannedit reported a boundary error when handling overly long IRC MODE messages CVE-2007-4584. Nico Golde reported an insecure creation of a temporary file within the ehostname function CVE-2007-5839. Impact A remote attacker could entice a user to...

mplayer -- vulnerability in STR files processor

Secunia reports: The vulnerability is caused due to a boundary error within the "strreadpacket" function in libavformat/psxstr.c. This can be exploited to cause a heap-based buffer overflow via a specially crafted STR file...

Alt-N Technologies SecurityGateway Username Buffer Overflow (CVE-2008-4193)

The Alt-N Technologies SecurityGateway offers email security with a spam filter that serves as an Exchange or SMTP firewall. A stack-based buffer overflow vulnerability was reported in Alt-N Technologies SecurityGateway. The vulnerability is due to a boundary error in the SecurityGateway that fai...

openSUSE 10 Security Update : cifs-mount (cifs-mount-5294)

Samba has been updated to fix a security problem : CVE-2008-1105: Secunia research discovered vulnerability in Samba, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the 'receivesmbraw' function in...

GLSA-200805-14 : Common Data Format library: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200805-14 Common Data Format library: User-assisted execution of arbitrary code Alfredo Ortega Core Security Technologies reported a boundary error within the Read32s64 function when processing CDF files. Impact : A remote attacke...

Common Data Format library: User-assisted execution of arbitrary code

Background The Common Data Format library is a scientific data management package which allows programmers and application developers to manage and manipulate scalar, vector, and multi-dimensional data arrays in a platform independent fashion. Description Alfredo Ortega Core Security Technologies...

HP OpenView Network Node Manager Message Handling Buffer Overflow (CVE-2008-1842)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been discovered in HP OpenView Netwo...

GLSA-200804-21 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-21 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash: Secunia Research and Zero Day Initiative reported a boundary error related to DeclareFunction2 Actionscript tags ...

FreeBSD : clamav -- Multiple Vulnerabilities (589d8053-0b03-11dd-b4ef-00e07dc4ec84)

Secunia reports : Some vulnerabilities have been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service or to compromise a vulnerable system. 1 A boundary error exists within the 'cliscanpe' function in libclamav/pe.c. This can be exploited to cause a...