1637 matches found
AIX 5.3 TL 12 : netstat (IV77039)
IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...
AIX 7.1 TL 2 : ntp (IV74262)
Network Time Protocol NTP Project NTP daemon ntpd is vulnerable to a denial of service, caused by an error when using symmetric key authentication. By sending specially-crafted packets to both peering hosts, an attacker could exploit this vulnerability to prevent synchronization. %NASLMINLEVEL...
IBM Domino 9.0.x < 9.0.1 Fix Pack 3 Interim Fix 2 GIF Code Execution
According to its banner, the version of IBM Domino formerly IBM Lotus Domino running on the remote host is 9.0.x prior to 9.0.1 Fix Pack 3 FP3 Interim Fix 2 IF2. It is, therefore, potentially affected by an integer truncation error when processing GIF files. A remote attacker, using a crafted GIF...
AIX 5.3 TL 12 : bind9 (IV68997)
CVE-2014-8500 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service memory consumption and named crash via a large or infinite number of referrals. Please see following for more...
AIX 7.1 TL 3 : bind9 (IV68996)
CVE-2014-8500 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service memory consumption and named crash via a large or infinite number of referrals. Please see following for more...
AIX 6.1 TL 9 : lvm (IV67907)
The running of lquerylv command with variable DBGCMDLQUERYLV set may allow a local user to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory lvmadvisory.asc. include'deprecatednasllevel.inc';...
IBM WebSphere Portal Open Redirect Vulnerability (PI19877)
The version of IBM WebSphere Portal on the remote host is affected by an unspecified open redirect vulnerability. This issue allows an attacker to perform a phishing attack by enticing a user to click on a malicious URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
AIX 7.1 TL 1 : malloc (IV62806)
It has been identified that the runtime linker allows privilege escalation via arbitrary file writes with elevated privileges programs. When MALLOCOPTIONS and MALLOCBUCKETS environment variables are set with bucket statistics options and by executing certain setuid programs, a non-privileged user...
AIX 6.1 TL 8 : malloc (IV62803)
It has been identified that the runtime linker allows privilege escalation via arbitrary file writes with elevated privileges programs. When MALLOCOPTIONS and MALLOCBUCKETS environment variables are set with bucket statistics options and by executing certain setuid programs, a non-privileged user...
AIX 6.1 TL 7 : malloc (IV61313)
It has been identified that the runtime linker allows privilege escalation via arbitrary file writes with elevated privileges programs. When MALLOCOPTIONS and MALLOCBUCKETS environment variables are set with bucket statistics options and by executing certain setuid programs, a non-privileged user...
SmartMail Server 2.0 Closed Connection Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6074/info SmartMail Server is reported to be prone to a denial of service when a client is sending data and then closes the connection unexpectedly. SmartMail Server will need to be restarted to regain normal functionalit...
AIX 7.1 TL 3 : malloc (IV60940)
It has been identified that the runtime linker allows privilege escalation via arbitrary file writes with elevated privileges programs. When MALLOCOPTIONS and MALLOCBUCKETS environment variables are set with bucket statistics options and by executing certain setuid programs, a non-privileged user...
AIX 6.1 TL 7 : ntp (IV58413)
The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service traffic amplification via forged 1 REQMONGETLIST or 2 REQMONGETLIST1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...
IBM Domino 9.0.0 < 9.0.0 Interim Fix 4 iNotes Buffer Overflow (credentialed check)
The remote host has a version of IBM Domino formerly Lotus Domino 9.0.0 prior to 9.0.0 Interim Fix 4 IF4 , and thus is affected by a buffer overflow error in the iNotes component that could allow an authenticated user to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"...
IBM Domino 8.5.x < 8.5.3 Fix Pack 5 Interim Fix 1 iNotes Buffer Overflow
According to its banner, the version of IBM Domino formerly IBM Lotus Domino on the remote host is 8.5.3 prior to 8.5.3 Fix Pack 5 FP5 Interim Fix 1 IF1, and thus is affected by a buffer overflow error in the iNotes component that could allow an authenticated user to execute arbitrary code...
IBM WebSphere Portal Web Content Viewer Portlet Privilege Escalation (PI15723)
The version of IBM WebSphere Portal on the remote host is affected by a privilege escalation vulnerability in the Web Content Viewer portlet due to improper handling of JSP includes. A remote attacker is able to obtain sensitive information, cause a denial of service, or control the request...
AIX 7.1 TL 2 : ptrace (IV58861)
IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...
AIX 6.1 TL 8 : ptrace (IV58948)
IBM AIX is vulnerable to a denial of service, caused by an error in the ptrace function. A local attacker could exploit this vulnerability to cause a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...
UBUNTU-CVE-2014-2983
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors...
