SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7553)

This update for PHP5 fixes the following security issues : - Input Validation in the ZIP extension and NumberFormatter. CWE-20, CVE-2011-0421 / CVE-2011-1470 / CVE-2011-1467 - Numeric Errors in the SHM support and ZIP extension. CWE-189, CVE-2011-1092 / CVE-2011-1471 - Buffer overflows in the...

Fedora 15 : hardlink-1.0-12.fc15 (2011-14753)

fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Oracle Database Server MDSYS.MD Buffer Overflows and DoS Vulnerabilities

Oracle database is prone to a Buffer Overflow and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Final Draft 8 - Multiple Stack Buffer Overflows (Metasploit)

Final Draft 8 - Multiple Stack Buffer Overflows Metasploit Name : Final Draft 8 Multiple Stack Buffer Overflows Vendor Website : http://www.finaldraft.com/index.php Date Released : 29/11/2011 Affected Software : Final Draft in in in in in in in By crafting a file that contains more than 10,032...

Fedora 16 : hardlink-1.0-12.fc16 (2011-14727)

fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

PHP 5.1.x < 5.1.5 Multiple Vulnerabilities

According to its banner, the version of PHP 5.x installed on the remote host is older than 5.1.5. Such versions may be affected by the following vulnerabilities : - The c-client library 2000, 2001, or 2004 for PHP does not check the safemode or openbasedir functions. CVE-2006-1017 - A buffer...

CVE-2011-1919

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

Stack overflow

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

CVE-2011-1919

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via crafted TCP message traffic to 1 PRProficyMgr.exe in Profic...

HighCMS Overflow

---------------------------------------------------------------- HighCMS True Demos: http://www.mayadin.biz/index.aspx?siteid=1&pageid=4141414141 http://ielts-house.com/index.aspx?siteid=1&pageid=4141414141 http://www.persiangoldfish.com/index.aspx?siteid=1&pageid=414141414141...

FreeBSD : OpenTTD -- Multiple buffer overflows in validation of external data (9bad5ab1-f3f6-11e0-8b5c-b482fe3f522d)

The OpenTTD Team reports : Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file. %NASLMINLEVEL 70300 C Tenable Network Security,...

FreeBSD : OpenTTD -- Buffer overflows in savegame loading (78c25ed7-f3f9-11e0-8b5c-b482fe3f522d)

The OpenTTD Team reports : Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via vectors related to 1 NAME, 2 PLYR, 3 CHTS, or 4 AIPL aka AI config chunk loading from a savegame. %NASLMINLEVEL 7030...

CVE-2011-2517

Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAPNETADMIN capability during scan operations with a long SSID value...

Novell Groupwise multiple security vulnerabilities

Multiple memory corruptions, buffer overflows, integer overflows, heap array overflow...

CVE-2010-4840

Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service SysEvttCol.exe process crash or possibly execute arbitrary code via a long Syslog PRI message header to UDP port 1 513 or 2 514. Fixed in 7.2 Build 7020...

CVE-2010-4840

CVE-2010-4840 affects ManageEngine EventLog Analyzer 6.1 where the Syslog server component (SysEvttCol.exe) contains multiple buffer overflows that can be triggered by a long Syslog PRI header sent to UDP ports 513 or 514. Successful exploitation may cause a denial-of-service (process crash) and ...

Sunway ForceControl multiple security vulnerabilities

Multiple buffer overflows, DoS conditions, directory traversal, ActiveX code execution...

Debian Security Advisory DSA 2306-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory DSA 2306-1. OpenVAS Vulnerability Test $Id: deb23061.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2306-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

KnFTP 1.0.0 Server - Multiple Buffer Overflows (PoC) (SEH)

!/usr/bin/python Title: KnFTP Server Buffer Overflow Exploit DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret kinda Bug that made me fuzz this app by Blake: http://www.exploit-db.com/exploits/17819/ Date Found: Sept 18th 2011 Tested on: Windows XP SP2/SP3...

Stack overflow

Multiple stack-based buffer overflows in the DHOneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 domain, 2 reportdomain, 3 registerdatahub, or 4 slave commands...