DEBIAN-CVE-2019-18218

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

UBUNTU-CVE-2019-18218

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

PT-2019-5102

Name of the Vulnerable Software and Affected Versions file versions through 5.37 Description The issue is related to a heap-based buffer overflow error in the cdf read property info function, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and...

EulerOS Virtualization 3.0.1.0 : file (EulerOS-SA-2019-1424)

According to the versions of the file packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A denial of service flaw was found in the File Information fileinfo extension rules for detecting AWK files. A remote attacker coul...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists in the cdfcountchain function in cdf.c, where a DoS can be caused by parsing a CDF file...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists in the cdfreadpropertyinfo function in file, where a DoS can be caused when parsing a CDF file...

Denial Of Service (DoS)

php is vulnerable to denial of service DoS. The vulnerability exists as the cdfcheckstreamoffset function of cdf.c, where a DoS can be caused by parsing a CDF file...

Denial Of Service

PHP is susceptible to denial of service. The vulnerability exists because of the way the File Information fileinfo extension parsed certain Composite Document Format CDF files. An attacker can inject malicious CDF file to crash a PHP...

PHP 5.6.0 Development Releases CDF File NULL Pointer Dereference DoS

According to its banner, the version of PHP installed on the remote host is a development version of 5.6.0. It is, therefore, affected by a NULL pointer dereference error in the 'libmagic' library of the 'fileinfo' extension when processing malformed CDF files. By uploading a specially crafted CD...

Event Viewer on the PVS Target Devices Shows: "Unable to update database with new machine account - The operation completed successfully. (0x0)"

Error shown in the Event Viewer on all the PVS Target Devices: Source: BNDevice EventID: 1014 Unable to update database with new machine account password - The operation completed successfully. 0x0. All PVS Target Devices are getting the same error every one hour after the first automatic attempt...

PT-2018-17589

Name of the Vulnerable Software and Affected Versions Hybrid Cloud Management Containerized Suite versions HCM2017.11 through HCM2018.05 Operations Bridge Containerized Suite versions 2017.11 through 2018.05 Data Center Automation Containerized Suite versions 2017.01 through 2018.05 Service...

CVE-2018-6498: Improper Control of Generation of Code

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

How To Collect Remote CDF Tracing

Step to follow to collect Remote CDF tracing...

How to Save CDF Monitor Logs On A UNC Network Share

Due to local disk space constraints or for Non-Persistent VDA's administrator may want to save the CDF Monitor logs on a UNC network share...

Security Bulletin: IBM WebSphere Dashboard Framework is affected by multiple security vulnerabilities in Apache POI

Summary Apache POI, which is bundled with IBM WebSphere Dashboard Framework, is vulnerable to denial of service attacks and could allow a remote attacker to obtain sensitive information. Vulnerability Details IBM WebSphere Dashboard Framework WDF bundles a copy of Apache POI, which is used by the...

Virtual Apps and Desktops: Logon Duration in MonitorData.Session Table shows "Null"

Logon Duration inMonitorData.Session Table in Monitoring Database shows "Null" value for all sessions and hence Director does not report Average logon Duration for Sessions. Restarting the Monitoring Service on Delivery Controllers does not fix the issue. We used the below scripts to ensure thatO...

Using Task Scheduler to automate the collection of CDF traces

It gets difficult at times when we need to capture CDF traces for a specific period of time. We have different tools like CDF Control, Scout and CDF Monitor, however it requires manual intervention to start and stop the traces and yet there are chances that the traces might get over-written if yo...

PHP < 5.6.0 DoS Vulnerability - Windows

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

FreeBSD : FreeBSD -- Multiple vulnerabilities in file(1) and libmagic(3) (70140f20-6007-11e6-a6c3-14dae9d210b8)

A specifically crafted Composite Document File CDF file can trigger an out-of-bounds read or an invalid pointer dereference. CVE-2012-1571 A flaw in regular expression in the awk script detector makes use of multiple wildcards with unlimited repetitions. CVE-2013-7345 A malicious input file could...

PHP Compromise Protected Information

A vulnerability exists in the cdfcheckstreamoffset function in the cdf.c file of the Fileinfo component in PHP, due to the use of incorrect sector size data. Exploiting this vulnerability allows malicious actors to cause a service failure abnormal termination of the application by utilizing a...