2072 matches found
CentOS Update for libvorbis CESA-2009:1219 centos5 i386
Check for the Version of libvorbis OpenVAS Vulnerability Test CentOS Update for libvorbis CESA-2009:1219 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
PT-2011-09: Arbitrary Command Execution in ManageEngine ServiceDesk Plus 8.0.0
The specialists of the Positive Research center have revealed an arbitrary code execution vulnerability in ManageEngine ServiceDesk Plus. If Microsoft SQL Server is used as application database server, insufficient validation of input settings for /CustomReporthandler.do script that is use to...
HP Data Protector Client EXEC_CMD Command Execution
Added: 06/07/2011 CVE: CVE-2011-0923 BID: 46234 OSVDB: 72526 Background HP OpenView Storage Data Protector is a backup solution for enterprise and distributed environments. Problem The HP Data Protector Client is vulnerable to remote code execution as a result of insufficient input validation of...
FreeBSD 8.07.37.2 - nfs_mount() Local Privilege Escalation
FreeBSD 8.07.37.2 - nfsmount Local Privilege Escalation / nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD 8.0-RELEASE: Local kernel crash/denial-of-service. FreeBSD 7.3/7.2-RELEASE: Local privilege escalation...
Novell ZENworks Configuration Management UploadServlet Remote Code Execution
Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...
Debian DSA-1825-1 : nagios2, nagios3 - insufficient input validation
It was discovered that the statuswml.cgi script of nagios, a monitoring and management system for hosts, services and networks, is prone to a command injection vulnerability. Input to the ping and traceroute parameters of the script is not properly validated which allows an attacker to execute...
Debian DSA-1870-1 : pidgin - insufficient input validation
Federico Muttis discovered that libpurple, the shared library that adds support for various instant messaging networks to the pidgin IM client, is vulnerable to a heap-based buffer overflow. This issue exists because of an incomplete fix for CVE-2008-2927 and CVE-2009-1376. An attacker can exploi...
Debian DSA-1904-1 : wget - insufficient input validation
Daniel Stenberg discovered that wget, a network utility to retrieve files from the Web using HTTPS and FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' published at the Blackhat conference some time ago. This allows an attacker to perform undetected man-in-the-middle...
Debian DSA-1916-1 : kdelibs - insufficient input validation
Dan Kaminsky and Moxie Marlinspike discovered that kdelibs, core libraries from the official KDE release, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL serve...
PHP < 5.2.12 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.12. Such versions may be affected by several security issues : - It is possible to bypass the 'safemode' configuration setting using 'tempnam'. CVE-2009-3557 - It is possible to bypass the 'openbasedir'...
dotDefender 3.8-5 - Remote Command Execution
dotDefender 3.8-5 - Remote Command Execution Problem Description =================== A remote command execution vulnerability exists in the dotDefender 3.8-5 Site Management. dotDefender 1 is a web appliaction firewall WAF which 'prevents hackers from attacking your website.' Technical Details...
[SECURITY] [DSA 1905-1] New python-django packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1905-1 [email protected] http://www.debian.org/security/ Nico Golde October 10th, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1905-1] New python-django packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA-1905-1 [email protected] http://www.debian.org/security/ Nico Golde October 10th, 2009 http://www.debian.org/security/faq -...
RedHat Security Advisory RHSA-2009:1219
The remote host is missing updates announced in advisory RHSA-2009:1219. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. An insufficient inp...
RedHat Security Advisory RHSA-2009:1138
The remote host is missing updates announced in advisory RHSA-2009:1138. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...
openswan security update
CentOS Errata and Security Advisory CESA-2009:1138 Updated openswan packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation ...
Adobe Reader JBIG2 Page Information Integer Overflow (APSB09-07; CVE-2009-0509)
Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A memory corruption vulnerability has been discovered in Adobe Reader and Acrobat. The...
Golabi CMS 1.0.1 Session Poisoning
-------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ /| | \ /|| / / | /| /\ / \ / / / // / /// / -------------------------------------------------------------------------------- wWw.CrazyAngel.iR - info-AT-CrazyAngel.iR...
Golabi CMS <= 1.0.1 Session Poisoning Vulnerability
No description provided by source. -------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ | |/ /\ \ / \ / / | | \ | | // / / \ / | \ | / // /| | \ /|| / / | /| /\ / \ / / / // / /// /...
Golabi CMS <= 1.0.1 Session Poisoning Vulnerability
Exploit for unknown platform in category web applications =================================================== Golabi CMS = 1.0.1 Author: R3dM0ve HomePage: http://golabicms.sourceforge.net/ + Vulnerability Info: Type: Session Poisoning Bug Hunter: CrazyAngel Vul URL:...