CVE-2009-3525

The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2007:0829)

Updated java-1.5.0-ibm packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

PT-2009-2346 · Zen Cart · Zen Cart

Name of the Vulnerable Software and Affected Versions: Zen Cart versions 1.3.8 through 1.3.8a Description: A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files via a .. dot dot in the loader file parameter in admin/includes/initsystem.php when...

FreeBSD 7.2 (pecoff executable) Local Denial of Service Exploit

No description provided by source. / pecoffpanic.c by Shaun Colley, 20 July 2009 this code will panic the freebsd kernel due to a bug in the PECOFF executable loader code 'options PECOFFSUPPORT' in kernel config or kldload pecoff panic9 is in vmfault due to a page fault. the panic seems to be...

openSUSE Security Update : libQtWebKit-devel (libQtWebKit-devel-216)

A flaw in the CSS loader of the WebKit engine could crash programs and potentially allows execution of arbitrary code CVE-2008-3632. This update also fixes unrelated problems with printing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : WebKitGtk (WebKitGtk-212)

A flaw in the CSS loader of the WebKit engine could crash programs and potentially allows execution of arbitrary code CVE-2008-3632. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

FreeBSD 7.2 - pecoff Local Denial of Service

FreeBSD 7.2 - pecoff Local Denial of Service / pecoffpanic.c by Shaun Colley, 20 July 2009 this code will panic the freebsd kernel due to a bug in the PECOFF executable loader code 'options PECOFFSUPPORT' in kernel config or kldload pecoff panic9 is in vmfault due to a page fault. the panic seems...

FreeBSD 7.2 - 'pecoff' Local Denial of Service

/ pecoffpanic.c by Shaun Colley, 20 July 2009 this code will panic the freebsd kernel due to a bug in the PECOFF executable loader code 'options PECOFFSUPPORT' in kernel config or kldload pecoff panic9 is in vmfault due to a page fault. the panic seems to be caused in genericbcopy...probably...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2009:019)

A vulnerability have been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file CVE-2008-5187. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C...

Mandriva Update for gimp MDKSA-2007:170 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:170 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for gimp MDKSA-2007:108 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:108 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu: Security Advisory (USN-435-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for kdegraphics, koffice, poppler vulnerability USN-410-1

Ubuntu Update for Linux kernel vulnerabilities USN-410-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4101.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for kdegraphics, koffice, poppler vulnerability USN-410-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

Ubuntu: Security Advisory (USN-433-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-410-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for tetex-bin vulnerability USN-410-2

Ubuntu Update for Linux kernel vulnerabilities USN-410-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN4102.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for tetex-bin vulnerability USN-410-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for xine-lib vulnerability USN-435-1

Ubuntu Update for Linux kernel vulnerabilities USN-435-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4351.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xine-lib vulnerability USN-435-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Addonics NAS Adapter - (Authenticated) Denial of Service

!/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c LOADER32 1.15, and NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and loganWHD, I...

GLSA-200903-10 : Irrlicht: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-10 Irrlicht: User-assisted execution of arbitrary code An unspecified component of the B3D loader is vulnerable to a buffer overflow due to missing boundary checks. Impact : A remote attacker could entice a user to open a...