CD-ROM Autostart (Windows)

The script detects if CD-ROM Autostart is activated. OpenVAS Vulnerability Test $Id: GSHBWMICD-Autostart.nasl 7061 2017-09-05 11:50:40Z teissa $ CD-ROM Autostart Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgroup...

Linux Kernel sg_build_indirect函数本地拒绝服务漏洞

CVE ID: CVE-2009-3288 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/scsi/sg.c文件中的sgbuildindirect函数在访问数组时使用了错误的变量，这允许本地攻击者通过使用xcdroast复制CD导致内核崩溃和空指针引用。仅有可打开光驱设备的用户才可以利用这个漏洞。 Linux kernel 2.6.28-rc1 - 2.6.31-rc8 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Null pointer dereference

The sgbuildindirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service kernel OOPS and NULL pointer dereference, as demonstrated by using xcdroast to duplicate a CD...

CVE-2009-3288

The sgbuildindirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service kernel OOPS and NULL pointer dereference, as demonstrated by using xcdroast to duplicate a CD...

[SECURITY] Fedora 10 Update: kdemultimedia-4.3.1-1.fc10

The kdemultimedia package contains multimedia applications, including: dragonplayer a simple video player juk a music manager and player kmix an audio mixer kscd an Audio-CD player...

WAR-FTPD 1.65 (MKD/CD Requests) Denial of Service Vuln

Exploit for unknown platform in category dos / poc ====================================================== WAR-FTPD 1.65 MKD/CD Requests Denial of Service Vuln ====================================================== WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker...

CVE-2009-2225

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2009-2225

CVE-2009-2225 refers to a stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 (trial) that allows remote code execution via crafted playlist files (1) m3u or (2) pls). The vulnerability description and related sources indicate the overflow occurs in playlist parsing, enabling arbitrar...

CVE-2009-2225

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

KLA10348 ACE vulnerability in SureThing CD/DVD Labeler

Buffer overflow was found in the SureThing CD/DVD Labeler. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories - Exploitation Related products SureThing-CD-DVD-Labeler CVE...

CVE-2009-2225: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

MDKA-2007:050 : shared-mime-info

A misconfiguration in the default application priorities was causing file-roller an archive manager to be used by default for ISO image files, instead of nautilus-cd-burner, for the GNOME desktop environment. This bug has been fixed with an updated shared-mime-info package, which also contains...

MDKA-2007:115 : sound-juicer

A bug in sound-juicer could lead to locking the CD drive, preventing erasing or rewriting rewritable medias in it. This package fixes this bug and includes other stability fixes and translation updates. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is n...

Mandriva Update for nautilus MDVA-2008:090 (nautilus)

Check for the Version of nautilus OpenVAS Vulnerability Test Mandriva Update for nautilus MDVA-2008:090 nautilus Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for drakxtools MDKA-2007:102 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDKA-2007:102 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for shared-mime-info MDKA-2007:050 (shared-mime-info)

Check for the Version of shared-mime-info OpenVAS Vulnerability Test Mandriva Update for shared-mime-info MDKA-2007:050 shared-mime-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for sound-juicer MDKA-2007:115 (sound-juicer)

Check for the Version of sound-juicer OpenVAS Vulnerability Test Mandriva Update for sound-juicer MDKA-2007:115 sound-juicer Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for shared-mime-info MDVA-2008:118 (shared-mime-info)

Check for the Version of shared-mime-info OpenVAS Vulnerability Test Mandriva Update for shared-mime-info MDVA-2008:118 shared-mime-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...