Debian: Security Advisory (DSA-164)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 606-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory DSA 606-1. OpenVAS Vulnerability Test $Id: deb6061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 606-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1129-1 (orisis)

The remote host is missing an update to orisis announced via advisory DSA 1129-1. Ulf Harnhammar and Max Vozeler from the Debian Security Audit Project have found several format string security bugs in osiris, a network-wide system integrity monitor control interface. A remote attacker could...

CVE-2007-6679

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

Code injection

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

CVE-2007-6679

CVE-2007-6679 affects IBM WebSphere Application Server 6.1 before Fix Pack 13, with an unspecified vulnerability in the Administrative Console related to monitor role users. Connected sources indicate additional impact on WebSphere 6.0.x before Fix Pack 25 and list multiple vulnerabilities in 6.1...

CVE-2007-6679: Undefined Security Weakness

Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...

DEBIAN-CVE-2007-6562

Multiple stack-based buffer overflows in the use of FDSET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the 1 SocketAddress::Connect function in libsolve/sockprot.cpp and 2 monitorbridge function in...

[SECURITY] Fedora 8 Update: xfce4-cpugraph-plugin-0.4.0-2.fc8

A CPU monitor plugin for the Xfce panel. It offers multiple display modes LED, gradient, fire, etc... to show the current CPU load of the system. T he colors and the size of the plugin are customizable...

[SECURITY] Fedora 7 Update: xfce4-cpugraph-plugin-0.4.0-2.fc7

A CPU monitor plugin for the Xfce panel. It offers multiple display modes LED, gradient, fire, etc... to show the current CPU load of the system. T he colors and the size of the plugin are customizable...

Debian DSA-1420-1 : zabbix - programming error

Bas van Schaik discovered that the agentd process of Zabbix, a network monitor system, may run user-supplied commands as group id root, not zabbix, which may lead to a privilege escalation. zabbix is not included in the oldstable distribution sarge. %NASLMINLEVEL 70300 C Tenable Network Security,...

DSA-1420-1 zabbix - programming error

Bulletin has no description...

CVE-2007-5756

Multiple array index errors in the bpffilterinit function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode aka Table Management Extensions or TME, and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests...

CVE-2007-5756

CVE-2007-5756 : A local privilege-escalation flaw in WinPcap’s NPF.SYS driver (bpf_filter_init) arises from multiple array-indexing errors when handling IOCTLs, allowing crafted IOCTL requests to gain kernel-mode privileges. Affected: WinPcap up to version 4.0.1 (and variants used by Wireshark). ...

CVE-2007-5756: Improper Validation of Array Index

Multiple array index errors in the bpffilterinit function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode aka Table Management Extensions or TME, and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests...

PT-2007-6732 · Riverbed +1 · Npf.Sys +2

Name of the Vulnerable Software and Affected Versions: WinPcap versions prior to 4.0.2 Description: The issue is related to multiple array index errors in the bpf filter init function in NPF.SYS, which occurs when WinPcap is run in monitor mode. This can be exploited by local users via crafted...

Code injection

The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service crash via invalid messages...

CVE-2007-5283

The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service crash via invalid messages...

CVE-2007-5283

The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor 01-00 through 03-00 might allow attackers to cause a denial of service crash via invalid messages...

CVE-2007-5283

The connected documents confirm a DoS vulnerability in the Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor (TSC Domain Manager component) affecting versions 01-00 through 03-00. The issue arises when the TSC Domain Manager processes invalid messages,...