Layered Defense Research Advisory: Format String Vulnerablity in Symantec PcAnywhere v10-12.5

================================================== Layered Defense Research Advisory 17 March 2009 ================================================== 1 Affected Product Symantec PcAnywhere version 10 – 12.5 ================================================== 2 Severity Rating: Low...

Symantec pcAnywhere本地格式串漏洞

BUGTRAQ ID: 33845 CVECAN ID: CVE-2009-0538 Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 pcAnywhere中存在格式串漏洞，通过授权的本地用户可以通过提交恶意请求导致pcAnywhere应用崩溃。 Symantec pcAnywhere 12.5 Symantec pcAnywhere 12.1 Symantec pcAnywhere 12.0 厂商补丁： Symantec -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Format string

Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service application crash or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file aka...

CVE-2009-0538

Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service application crash or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file aka...

CVE-2009-0538

Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service application crash or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file aka...

CVE-2009-0538

CVE-2009-0538 is a local format-string vulnerability in Symantec pcAnywhere prior to 12.5 SP1. The issue arises from improper handling of format strings in the filename/path of remote control files (CHF files), allowing a local attacker to read/write arbitrary memory and potentially cause a denia...

CVE-2009-0538: Use of Externally-Controlled Format String

Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service application crash or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file aka...

Symantec pcAnywhere Format String Denial of Service

SUMMARY Symantec pcAnywhere is susceptible to a format string vulnerability. An authorized local user may potentially leverage this to crash the pcAnywhere application, leading to a denial of service. AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec pcAnywhere | 12....

CVE-2008-6441

CVE-2008-6441 describes a format-string vulnerability in the Epic Games Unreal engine client used by multiple games, allowing remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed PKG, and possibly (3) the LEVEL parameter in a WELCOME command. Af...

CVE-2008-6441

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...

CVE-2008-6441: Use of Externally-Controlled Format String

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...

GLSA-200903-01 : Vinagre: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-01 Vinagre: User-assisted execution of arbitrary code Alfredo Ortega Core Security Technologies reported a format string error in the vinagreutilsshowerror function in src/vinagre-utils.c. Impact : A remote attacker could...

Gentoo Security Advisory GLSA 200903-01 (vinagre)

The remote host is missing updates announced in advisory GLSA 200903-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-01 (vinagre)

The remote host is missing updates announced in advisory GLSA 200903-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Vinagre: User-assisted execution of arbitrary code

Background Vinagre is a VNC Client for the GNOME Desktop. Description Alfredo Ortega Core Security Technologies reported a format string error in the vinagreutilsshowerror function in src/vinagre-utils.c. Impact A remote attacker could entice a user into opening a specially crafted .vnc file or...

RedHat Update for evolution RHSA-2008:0177-01

Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2008:0177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for evolution RHSA-2008:0177-01

Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2008:0177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for vim RHSA-2008:0617-01

Check for the Version of vim OpenVAS Vulnerability Test RedHat Update for vim RHSA-2008:0617-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for vim RHSA-2008:0617-01

Check for the Version of vim OpenVAS Vulnerability Test RedHat Update for vim RHSA-2008:0617-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

For the Oracle TNS listener attack methods of finishing-vulnerability warning-the black bar safety net

First, depending on the version, the TNS listener may be more susceptible to a variety of types of buffer overflow attacks, these attacks can be in does not provide a user ID and password to be used. For example: in oracle 9i, when a client requests a long servicename,are vulnerable to overflow...