CVE-2017-1297

CVE-2017-1297 affects IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server). The vulnerability is a stack-based buffer overflow caused by improper bounds checking in the CLP path, which could allow a local attacker to execute arbitrary code. In affected IBM DB2 LUW releases (notably 9.2/1...

Disk Savvy Enterprise v10.4.18

This module exploits a stack-based buffer overflow vulnerability in Disk Savvy Enterprise v10.4.18, caused by improper bounds checking of the request sent to the built-in server. This module has been tested successfully on Windows 7 SP1 x86. Module Options msf use exploit/windows/misc/disk/savvya...

AIX 6.1 TL 9 : bos.net.tcp.client (U869149)

The remote host is missing AIX PTF U869149, which is related to the security of the package bos.net.tcp.client. Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending specially crafted NTP packets, a remote attacker from within the local...

AIX 7.1 TL 4 : bos.net.tcp.client (U868958)

The remote host is missing AIX PTF U868958, which is related to the security of the package bos.net.tcp.client. Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending specially crafted NTP packets, a remote attacker from within the local...

Core FTP Server 32-bit Build 587 - Heap Overflow

Exploit for windows platform in category dos / poc -- coding: cp1252 -- Exploit Title: Core FTP Server 32-bit - Build 587 Heap Overflow Date: 05/10/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.coreftp.com/ Vulnerable Version Download:...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Mon Apr 25 10:06:21 CDT 2016 |Updated: Wed Dec 6 10:17:27 CST 2017 |Update: Changed impacted fileset for AIX 7.2 from bos.net.tcp.client | to bos.net.tcp.bindutils. The most recent version of this document is available here:...

Advantech WebAccess Multiple Buffer Overflow Vulnerabilities (Jan 2016)

Advantech WebAccess is prone to multiple stack-based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM Lotus Domino BMP Parsing Integer Overflow (CVE-2015-1902)

An integer overflow vulnerability has been reported in IBM Lotus Domino. The vulnerability is due to improper bounds checking when parsing a BMP image with crafted dimensions. This could potentially lead to an undersized buffer being allocated. A remote, unauthenticated attacker can exploit this...

Design/Logic Flaw

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....

Panda Internet Security Heap Based Buffer Overflow (Sep 2014)

Panda Internet Security is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WSMP3 0.0.1/0.0.2 - Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/6239/info Several buffer overflow conditions have been reported for WSMP3. The vulnerability is due to improper bounds checking when copying data to local buffers. An attacker can exploit this vulnerability by sending an...

Adobe Reader U3D PCX Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the improper bounds...

FlashFXP Multiple Buffer Overflow Vulnerabilities

FlashFXP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:flashfxp:flashfxp"...

FreeBSD : sudosh -- buffer overflow (8675efd5-e22c-11e1-a808-002354ed89bc)

ISS reports : sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay function. By persuading a victim to replay a specially crafted recorded sudo session, a local attacker could overflow a buffer and execute arbitrary code on the syst...

KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability

This host is installed with KMPlayer and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbkmplayerkplfilebofvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

Freefloat FTP Server POST Auth Multiple Commands Buffer Overflow Vulnerabilities

Freefloat FTP Server is prone to multiple buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Freefloat FTP Server POST Auth 'ABOR' Command Buffer Overflow Vulnerability

This host is running Freefloat FTP Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfreefloatftpaborcmdbofvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Freefloat FTP Server POST Auth 'ABOR' Command Buffer Overflow Vulnerability Authors: Veerendra G.G Copyrigh...

Wireshark Multiple Vulnerabilities - March-11 (Windows)

The host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnmar11win.nasl 7024 2017-08-30 11:51:43Z teissa $ Wireshark Multiple Vulnerabilities - March-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Network...

Freefloat FTP Server Buffer Overflow Vulnerability

This host is running Freefloat FTP Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfreefloatftpserverbofvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Freefloat FTP Server Buffer Overflow Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

Freefloat FTP Server <= 1.00 Buffer Overflow Vulnerability - Active Check

Freefloat FTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...