Apple Safari Multiple Vulnerabilities (Aug 2009)

Apple Safari Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2009-2850

Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...

CVE-2009-2850

Multiple buffer overflows in NASA Common Data Format CDF allow context-dependent attackers to execute arbitrary code, as demonstrated using 1 an array index error in the ReadAEDRList64 function, and other errors in the 2 SearchForRecordr64, 3 LastRecord64, 4 CDFsel64, and other unspecified...

CDF: User-assisted execution of arbitrary code

Background CDF is a library for the Common Data Format which is a self-describing data format for the storage and manipulation of scalar and multidimensional data. It is developed by the NASA. Description Leon Juranic reported multiple heap-based buffer overflows for instance in the ReadAEDRList6...

Subversion: Remote execution of arbitrary code

Background Subversion is a versioning system designed to be a replacement for CVS. Description Matt Lewis of Google reported multiple integer overflows in the libsvndelta library, possibly leading to heap-based buffer overflows. Impact A remote attacker with commit access could exploit this...

Mandrake Security Advisory MDVSA-2009:195-1 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:195-1. OpenVAS Vulnerability Test $Id: mdksa20091951.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:195-1 apr Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Linux Security Advisory : memcached (MDVSA-2009:202)

A vulnerability has been found and corrected in memcached : Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows CVE-2009-2415. This update provides a solution to...

RedHat Security Advisory RHSA-2009:1204

The remote host is missing updates announced in advisory RHSA-2009:1204. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way the Apache Portable Runtime APR manages memory pool and relocatable memory allocations. An attacker could use these flaws to issu...

Mandrake Security Advisory MDVSA-2009:190 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:190. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Debian Security Advisory DSA 1853-1 (memcached)

The remote host is missing an update to memcached announced via advisory DSA 1853-1. OpenVAS Vulnerability Test $Id: deb18531.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1853-1 memcached Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. OpenVAS Vulnerability Test $Id: mdksa2009166.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:166 c-client Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Mandrake Security Advisory MDVSA-2009:190 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:190. OpenVAS Vulnerability Test $Id: mdksa2009190.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:190 OpenEXR Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:195-1 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:195-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Debian: Security Advisory (DSA-1853-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : subversion (subversion-1185)

This version upgrade of subversion to 1.5.7 fixes some buffer overflows in the client and server code that can occur while parsing binary diffs. CVE-2009-2411 Version 1.5.7 also fixes various non-security bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

apr security update

CentOS Errata and Security Advisory CESA-2009:1204 Updated apr and apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache Portable...

RHEL 3 : httpd (RHSA-2009:1205)

Updated httpd packages that fix multiple security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. The httpd package shipped with...

Integer overflow

Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows...

CVE-2008-6922

Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argument to the 1 CreateUserPath, 2 Logout, 3 DeleteMailByUID, 4 MoveToInbox, 5 MoveToFolder, 6 DeleteMailEx, 7 GetMailDataEx, 8 SetReplySign, 9 SetForwardSign, a...