Mandriva Security Advisory MDVSA-2009:298 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:298. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:299)

Vulnerabilities have been discovered and corrected in xine-lib : - Integer overflow in the qterror parsetrakatom function in demuxers/demuxqt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom,...

CVE-2009-3720: Undefined Security Weakness

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

MiniShare HTTP 1.5.5 BoF

No description provided by source. / MiniShare HTTP Server 1.5.5 Remote Buffer overflow Exploit by eMP3R0r TEAM This bug Expl0ited and Discovered by iM4n Sp Tnx2 : Shabgard & Aria Security FOrum The Crimson Idol / include winsock2.h include stdio.h include string.h include stdlib.h include dos.h...

Solaris Update for usr/lib/utmp_update 113718-04

Check for the Version of usr/lib/utmpupdate OpenVAS Vulnerability Test Solaris Update for usr/lib/utmpupdate 113718-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Solaris Update for usr/lib/utmp_update 113718-04

Check for the Version of usr/lib/utmpupdate OpenVAS Vulnerability Test Solaris Update for usr/lib/utmpupdate 113718-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

CVE-2009-3492: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to 1 Calendar.php, 2 Comment.php, 3 Rss.php and 4 Trackback.php in lib/Loggix/Module/; and 5...

SILC Client Channel Name Format String Vulnerability

SILC Client is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SILC Client Channel Name Format String Vulnerability

This host has SILC Client installed and is prone to Format String vulnerability. OpenVAS Vulnerability Test $Id: secpodsilcprdtschannelnameformatstringvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SILC Client & Toolkit Channel Name Format String Vulnerability Authors: Nikita MR Copyright: Copyrigh...

FSphp 0.2.1 Remote File Inclusion

Exploit for unknown platform in category web applications ================================= FSphp 0.2.1 Remote File Inclusion ================================= o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download...

FSphp 0.2.1 Remote File Inclusion

o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ o Vulnerable file includeonce $FSPHPLIB . "/path.php" ; lib/FSphp.php...

SuSE9 Security Update : permissions and filesystem (YOU Patch Number 10539)

It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...

SuSE9 Security Update : permissions (YOU Patch Number 10815)

It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...

CVE-2009-3307: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHPLIB parameter to 1 FSphp.php, 2 navigation.php, and 3 pathwrite.php in lib/...

CVE-2009-3287: Improper Input Validation

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

Stack overflow

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

The CVE-2009-3221 entry concerns a stack-based buffer overflow in Audio Lib Player (ALP) . The vulnerability is triggered by a long URL inside a .m3u playlist file , allowing a remote attacker to execute arbitrary code on affected systems. The root cause is a stack-based overflow in ALP when proc...

CVE-2009-3221: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...