WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability

Document Title: =============== WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability Release Date: ============= 2011-09-05 Vulnerability Laboratory ID VL-ID: ==================================== 7 Common Vulnerability Scoring System: ==================================== 3.5 Product & Service...

Skype 2.8.x & 5.3.x - Memory Corruption Vulnerability

Document Title: =============== Skype 2.8.x & 5.3.x - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=180 CNNVD-201110-710 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100710 Release Date: ============= 2011-08-22...

UltraFXP v1.07 - Memory Corruption Vulnerability

Document Title: =============== UltraFXP v1.07 - Memory Corruption Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 161 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

iGuard V2.81 Player - Critical Pointer Vulnerability

Document Title: =============== iGuard V2.81 Player - Critical Pointer Vulnerability Release Date: ============= 2011-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 106 Product & Service Introduction: =============================== Die Fähigkeit, Ihren Kunden...

SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability

Document Title: =============== SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 127 Product & Service Introduction: =============================== SmartFTP is an FTP File...

SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability

Document Title: =============== SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 127 Product & Service Introduction: =============================== SmartFTP is an FTP File...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2555917)

This host is missing an important security update according to Microsoft Bulletin MS11-054. OpenVAS Vulnerability Test $Id: secpodms11-054.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2555917 Authors: Sooraj KS Copyright: Copyright c 20...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7568)

This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes several security issues and bugs. The following security issues were fixed : - Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service system cra...

SuSE 11.1 Security Update : libgssglue (SAT Patch Number 4620)

This update fixes insecure getenv usage in libgssglue, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...

SuSE 10 Security Update : libgssapi (ZYPP Patch Number 7544)

This update fixes insecure getenv usage, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Ubuntu 9.10 / 10.04 LTS / 10.10 : policykit-1 vulnerability (USN-1117-1)

Neel Mehta discovered that PolicyKit did not correctly verify the user making authorization requests. A local attacker could exploit this to trick pkexec into running applications with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from...

openSUSE Security Update : kernel (openSUSE-SU-2011:0346-1)

This update of the openSUSE 11.2 kernel fixes lots of security issues. Following security issues were fixed: CVE-2011-1493: In the rose networking stack, when parsing the FACNATIONALDIGIS facilities field, it was possible for a remote host to provide more digipeaters than expected, resulting in...

Oracle GlassFish/System Application Server Security Bypass Vulnerability

The host is running GlassFish/System Application Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gboracleglassfishnsjassecbypassvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Oracle GlassFish/System Application Server Security Bypass Vulnerability Authors: Antu...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. OpenVAS Vulnerability Test $Id: secpodms11-034.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2506223 Authors: Veerendra GG Copyright: Copyright c...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SuSE 11.1 Security Update : FUSE (SAT Patch Number 4095)

The following security issues were fixed : - FUSE allowed local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem. CVE-2010-3879 - Avoid mounting a directory including...

Gentoo Security Advisory GLSA 201006-09 (sudo)

The remote host is missing updates announced in advisory GLSA 201006-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201009-02 (maildrop)

The remote host is missing updates announced in advisory GLSA 201009-02. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201006-09 (sudo)

The remote host is missing updates announced in advisory GLSA 201006-09. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Logwatch Log File - Special Characters Privilege Escalation

Logwatch Log File - Special Characters Privilege Escalation source: https://www.securityfocus.com/bid/46554/info Logwatch is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue execute arbitrary code with superuser privileges. Successful exploits will resul...