3522 matches found
CVE-2009-0390
Argument injection vulnerability in Enomaly Elastic Computing Platform ECP, formerly Enomalism, before 2.1.1 allows local users to send signals to arbitrary processes by populating the /tmp/enomalism2.pid file with command-line arguments for the kill program...
CVE-2008-4990
Enomaly Elastic Computing Platform ECP, formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file...
CVE-2009-0390
CVE-2009-0390 concerns Enomaly ECP/Enomalism (pre-2.2.1) with local vulnerabilities in enomalism2.sh, where insecure temporary file handling enables argument injection into kill and signaling of arbitrary processes via the /tmp/enomalism2.pid PIDFILE. Connected sources describe a race condition o...
DEBIAN-CVE-2008-4539
Heap-based buffer overflow in the Cirrus VGA implementation in 1 KVM before kvm-82 and 2 QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorre...
DEBIAN-CVE-2008-5714
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended...
DEBIAN-CVE-2008-5660
Format string vulnerability in the vinagreutilsshowerror function src/vinagre-utils.c in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response...
CVE-2008-5540
Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...
Design/Logic Flaw
Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...
CVE-2008-5540
Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...
CVE-2008-5540
CVE-2008-5540 describes a bypass of malware detection in Secure Computing Secure Web Gateway (Webwasher) when using Internet Explorer 6/7. An attacker can place an MZ header at the start of an HTML document and modify the filename to have no extension, .txt, or .jpg, enabling the document to evad...
Condor Service Detection
The remote host is running Condor, an open source software framework for distributed job scheduling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid34693; scriptversion"1.12";...
Unfixed XSS vulnerability at www.globalcomputing.com
Security researcher xylitol, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting www.globalcomputing.com, which at the time of submission ranked 294102 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is...
[SECURITY] Fedora 9 Update: R-2.7.2-1.fc9
A language and environment for statistical computing and graphics. R is similar to the award-winning S system, which was developed at Bell Laboratories by John Chambers et al. It provides a wide variety of statistical and graphical techniques linear and nonlinear modelling, statistical tests, tim...
[SECURITY] Fedora 8 Update: R-2.7.2-1.fc8
A language and environment for statistical computing and graphics. R is similar to the award-winning S system, which was developed at Bell Laboratories by John Chambers et al. It provides a wide variety of statistical and graphical techniques linear and nonlinear modelling, statistical tests, tim...
Preemptive Protection against Castle Rock Computing SNMPc Network Manager Community String Stack Vulnerability
A buffer overflow vulnerability has been discovered in Castle Rock Computing SNMPc Network Manager. Castle Rock Computing SNMPc is a secure distributed network management system that uses the Simple Network Management Protocol SNMP to communicate with other networks. A remote attacker may exploit...
Critical Vulnerability in SNMPc
======= Summary ======= Name: Unauthenticated Stack Overflow in SNMPc Release Date: 30 April 2008 Reference: NGS00526 Discover: Wade Alcorn [email protected] and John Heasman [email protected] Vendor: Castle Rock Computing Systems Affected: SNMPc versions 7.1 and earlier Risk: Critical...
Design/Logic Flaw
Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service freeze via a crafted URL...
CVE-2008-1797
Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service freeze via a crafted URL...
CVE-2008-1797
The CVE-2008-1797 entry affects Secure Computing Webwasher; affected versions are 5.30 before build 3159 and 6.3.0 before build 3150. The issue is described as an unspecified vulnerability that allows remote attackers to cause a denial of service (freeze) via a crafted URL. No root-cause details,...