ImageStation - SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow (PoC)

ImageStation - SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow PoC Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to...

imagestation-overflow.txt

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to ImageStation that is a servicemark of Sony Electronics Inc. Internal name...

iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability

iDefense Security Advisory 01.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 31, 2008 I. BACKGROUND IBM Corp.'s Informix Dynamic Server is an online transaction processing data server. For more information, visit the product's homepage at the following URL...

SuSE 10 Security Update : MySQL (ZYPP Patch Number 4879)

This update fixes several security vulnerabilities note: not all versions are affected by every bug : - CVE-2007-2583 - CVE-2007-2691 - CVE-2007-2692 - CVE-2007-5925 - CVE-2007-5969 - CVE-2007-6303 - CVE-2007-6304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

Debian Security Advisory DSA 1456-1 (fail2ban)

The remote host is missing an update to fail2ban announced via advisory DSA 1456-1. OpenVAS Vulnerability Test $Id: deb14561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1456-1 fail2ban Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1465-1 (apt-listchanges)

The remote host is missing an update to apt-listchanges announced via advisory DSA 1465-1. OpenVAS Vulnerability Test $Id: deb14651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1465-1 apt-listchanges Authors: Thomas Reinke Copyright: Copyright c 2008...

Debian Security Advisory DSA 1459-1 (gforge)

The remote host is missing an update to gforge announced via advisory DSA 1459-1. OpenVAS Vulnerability Test $Id: deb14591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1459-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1461-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 1461-1. OpenVAS Vulnerability Test $Id: deb14611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1461-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0442: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the ffile parameter, a different vector than CVE-2008-0376. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-0391

The CVE-2008-0391 entry concerns inc/elementz.php in aliTalk 1.9.1.1, where authentication verification is flawed, enabling remote attackers to add an arbitrary user account by tampering with the lilil parameter alongside ubild and pa. The vulnerability enables partial confidentiality, integrity,...

CVE-2008-0391: Improper Authentication

inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters...

Sql injection

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 the mohit parameter to a inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via 2 the id parameter to...

CVE-2008-0371

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 the mohit parameter to a inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via 2 the id parameter to...

CVE-2008-0376: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfile parameter...

CVE-2008-0371: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 the mohit parameter to a inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via 2 the id parameter to...

Solaris 5.8 (x86) : 126357-03

Sun Java System Access Manager 7.1 Solarisx86. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Debian Security Advisory DSA 223-1 (geneweb)

The remote host is missing an update to geneweb announced via advisory DSA 223-1. OpenVAS Vulnerability Test $Id: deb2231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 223-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 677-1 (sympa)

The remote host is missing an update to sympa announced via advisory DSA 677-1. OpenVAS Vulnerability Test $Id: deb6771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 677-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 812-1 (turqstat)

The remote host is missing an update to turqstat announced via advisory DSA 812-1. Peter Karlsson discovered a buffer overflow in Turquoise SuperStat, a program for gathering statistics from Fidonet and Usenet, that can be exploited by a specially crafted NNTP server. For the old stable...

Debian Security Advisory DSA 1438-1 (tar)

The remote host is missing an update to tar announced via advisory DSA 1438-1. OpenVAS Vulnerability Test $Id: deb14381.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1438-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...