mgsoft-multi.txt

Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector From vendor's website: "MG-SOFT Net...

GLSA-200803-13 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-13 VLC: Multiple vulnerabilities Multiple vulnerabilities were found in VLC: Michal Luczaj and Luigi Auriemma reported that VLC contains boundary errors when handling subtitles in the ParseMicroDvd, ParseSSA, and ParseVplay...

Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)

Luigi Auriemma Application: McAfee Framework implemented in McAfee ePolicy Orchestrator 4.0 http://www.mcafee.com/us/enterprise/products/systemsecuritymanagement/epolicyorchestrator.html Versions: = 3.6.0.569 Platforms: Windows Bug: format string in naimcomnLog Exploitation: remote Date: 12 Mar...

McAfee Framework / ePolicy Orchestrator format string vulnerability

Format string vulnerability in logging functions...

SuSE 10 Security Update : evolution (ZYPP Patch Number 5086)

This update of evolution fixes multiple format-string vulnerabilities that can occur while processing encrypted messages. CVE-2008-0072 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

CentOS 4 / 5 : evolution (CESA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

openSUSE 10 Security Update : evolution (evolution-5087)

This update of evolution fixes multiple format-string vulnerabilities that can occur while processing encrypted messages. CVE-2008-0072 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

McAfee Framework ePolicy 3.x - Orchestrator _naimcomn_Log Remote Format String

McAfee Framework ePolicy 3.x - Orchestrator naimcomnLog Remote Format String source: https://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the...

McAfee Framework ePolicy 3.x - Orchestrator '_naimcomn_Log' Remote Format String

source: https://www.securityfocus.com/bid/28228/info McAfee Framework is prone to a remote format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of the framework or of an application that uses the framework. Failed attacks will like...

Debian: Security Advisory (DSA-1512-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1512-1 (evolution)

The remote host is missing an update to evolution announced via advisory DSA 1512-1. OpenVAS Vulnerability Test $Id: deb15121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1512-1 evolution Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Format string

Format string vulnerability in the logmessage function in lks.c in Linux Kiss Server 1.2, when background daemon mode is disabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in an invalid command...

CVE-2008-1206

Format string vulnerability in the logmessage function in lks.c in Linux Kiss Server 1.2, when background daemon mode is disabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in an invalid command...

PT-2008-2799 · Linux · Linux Kiss Server

Name of the Vulnerable Software and Affected Versions: Linux Kiss Server version 1.2 Description: The issue is related to a format string vulnerability in the log message function. This vulnerability can be exploited by remote attackers when the Linux Kiss Server is not running in background daem...

CVE-2008-1206

Linux Kiss Server 1.2 is affected by a format string vulnerability in the log_message function (lks.c) when running in non-daemon/foreground mode. The issue allows remote attackers to cause a crash or potentially execute arbitrary code via format string specifiers in an invalid command. Exploitat...

CVE-2008-1206

Format string vulnerability in the logmessage function in lks.c in Linux Kiss Server 1.2, when background daemon mode is disabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in an invalid command...

Fedora 7 : evolution-2.10.3-8.fc7 (2008-2290)

Ulf Harnhammar of Secunia Research discovered a format string flaw in the way Evolution displayed encrypted mail content. If a user opened a carefully crafted mail message, arbitrary code could be executed as the user running Evolution. CVE-2008-0072 Note that Tenable Network Security has extract...

RHEL 4 / 5 : evolution (RHSA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

GNOME Evolution format string vulnerability

Overview The GNOME Evolution mail client contains a format string vulnerability that may allow an attacker to execute code. Description Evolution is the default mail client for the GNOME desktop environment. Evolution supports both GPG and S/MIME mail encryption.From Secunia Advisory SA29057: A...

Debian DSA-1512-1 : evolution - format string attack

Ulf Harnhammar discovered that Evolution, the e-mail and groupware suite, had a format string vulnerability in the parsing of encrypted mail messages. If the user opened a specially crafted email message, code execution was possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...