Debian DSA-2447-1 : tiff - integer overflow

Alexander Gavrun discovered an integer overflow in the TIFF library in the parsing of the TileSize entry, which could result in the execution of arbitrary code if a malformed image is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

[SECURITY] [DSA 2398-2] curl regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2398-2 [email protected] http://www.debian.org/security/ Florian Weimer March 31, 2012 http://www.debian.org/security/faq -...

Tivoli Provisioning Manager Express for Software Distribution Multiple SQL Injections

The remote web application fails to properly sanitize user-supplied input to the following servlets : - Printer.getPrinterAgentKey in the SoapServlet servlet - User.updateUserValue in the register.do servlet - User.isExistingUser in the logon.do servlet - Asset.getHWKey in the CallHomeExec servle...

Tivoli Provisioning Manager Express for Software Distribution Detection

Tivoli Provisioning Manager Express for Software Distribution, an application for managing software distribution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58528; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

Carberp: It's Not Over Yet

On 20 March, Russian law enforcement agencies announced the arrest of a cybercriminal gang involved in stealing money using the Carberp Trojan. This is very good news, but unfortunately does not mark the end of the Carberp story. Evidently, those arrested were just one of the criminal gangs using...

Tivoli Provisioning Manager Express for Software Distribution Multiple SQL Injection Vulnerabilities

Binary data 6398.prm...

[SECURITY] [DSA 2441-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2441-1 [email protected] http://www.debian.org/security/ Florian Weimer March 25, 2012 http://www.debian.org/security/faq -...

New Linux Distro Promoted as Anonymous-OS

A new Ubuntu Linux distribution is being marketed as “Anonymous-OS” and comes pre-loaded with tools for hacking and protecting anonymity online. However, it is unclear whether the new operating system was created by the anarchic hacking group, or even has its endorsement. Anonymous-OS Version 0.1...

CVE-2012-0689

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

Design/Logic Flaw

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

[SECURITY] [DSA 2432-1] libyaml-libyaml-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2432-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 12, 2012 http://www.debian.org/security/faq -...

CVE-2012-0884

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack MMA adaptive chosen ciphertext...

Debian: Security Advisory (DSA-2410-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian Security Advisory DSA 2412-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 2412-1. OpenVAS Vulnerability Test $Id: deb24121.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2412-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DSA-2432-1 libyaml-libyaml-perl - format string vulnerability

Bulletin has no description...

Bugtraq-I : Distribution for Pentesting and forensics

Bugtraq-I : Distribution for Pentesting and forensics Bugtraq system offers the most comprehensive distribution, optimal, stable and automatic security to date. Bugtraq is a distribution based on the 2.6.38 kernel has a wide range of penetration and forensic tools. Bugtraq can be installed from a...

[SECURITY] [DSA 2428-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2428-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 07, 2012 http://www.debian.org/security/faq -...

CVE-2012-0198

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...

Stack overflow

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...