Fedora 11 : viewvc-1.1.2-2.fc11 (2009-8507)

CHANGES in 1.1.2: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values - add optional support for character encoding detection issue 400 - fix username case handling in svnauthz module issue 419 - fix cvsdbadmin/svnadm...

openSUSE Security Update : cups (cups-232)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian Security Advisory DSA 1823-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 1823-1. OpenVAS Vulnerability Test $Id: deb18231.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1823-1 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

DSA-1823-1 samba - several vulnerabilities

Bulletin has no description...

Sun Solaris 'lp'客户端本地拒绝服务漏洞

Bugraq ID: 35400 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在一个未明错误，本地攻击者可以利用漏洞取消root的打印作业。 此安全问题发生于安装了补丁127127-11 SPARC或127128-11的Solaris 10。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun...

Windows Print Spooler EnumeratePrintShares buffer overflow

Added: 06/16/2009 CVE: CVE-2009-0228 BID: 35206 Background The Windows Print Spooler manages the printing process on Windows operating systems. Problem A buffer overflow vulnerability in the EnumeratePrintShares function in the Windows Print Spooler service allows arbitrary command execution when...

Windows Print Spooler EnumeratePrintShares buffer overflow

Added: 06/16/2009 CVE: CVE-2009-0228 BID: 35206 Background The Windows Print Spooler manages the printing process on Windows operating systems. Problem A buffer overflow vulnerability in the EnumeratePrintShares function in the Windows Print Spooler service allows arbitrary command execution when...

Windows Print Spooler EnumeratePrintShares buffer overflow

Added: 06/16/2009 CVE: CVE-2009-0228 BID: 35206 Background The Windows Print Spooler manages the printing process on Windows operating systems. Problem A buffer overflow vulnerability in the EnumeratePrintShares function in the Windows Print Spooler service allows arbitrary command execution when...

Windows Print Spooler EnumeratePrintShares buffer overflow

Added: 06/16/2009 CVE: CVE-2009-0228 BID: 35206 Background The Windows Print Spooler manages the printing process on Windows operating systems. Problem A buffer overflow vulnerability in the EnumeratePrintShares function in the Windows Print Spooler service allows arbitrary command execution when...

iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability

iDefense Security Advisory 06.09.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 09, 2009 I. BACKGROUND The Windows Print Spooler manages the printing process, and loads files to memory for later printing. For more information about Print Spooler, please visit following website:...

Windows print spooler multiple security vulnerabilities

Buffer overflow, unauthorized files access, privilege escalation with dynamic library loading...

Mirosoft Windows打印后台程序DLL库加载漏洞(MS09-022)

BUGTRAQ ID: 35209 CVECAN ID: CVE-2009-0230 Microsoft Windows是微软发布的非常流行的操作系统。 Windows打印后台处理程序没有正确地验证可能加载DLL的路径。如果远程攻击者将恶意的DLL存储在了打印后台程序可访问的位置上然后向受影响的系统发送了特制的RPC消息的话，就可能导致打印后台程序加载恶意的DLL并以提升的权限执行代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista...

Microsoft Windows打印后台程序本地信息泄露漏洞(MS09-022)

BUGTRAQ ID: 35208 CVECAN ID: CVE-2009-0229 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的打印服务没有正确的检查分隔符页面中可能包含的文件，攻击者可以登录到系统并创建特制的分隔符页面，导致读取或打印系统上的任何文件。即使用户没有管理访问权，也可以执行这些操作。但是，匿名用户无法利用此漏洞，也无法以远程方式利用此漏洞。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows...

Microsoft Windows打印后台程序远程溢出漏洞(MS09-022)

BUGTRAQ ID: 35206 CVECAN ID: CVE-2009-0228 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的打印后台程序在解析某些打印数据结构时存在缓冲区溢出漏洞。远程攻击者可以首先诱骗用户访问恶意的打印服务器，然后向受影响系统发送特制的RPC请求，导致在枚举期间错误的解析打印服务器的ShareName。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建新帐户。 Microsoft Windows 2000SP4 临时解决方法： 在防火墙阻断TCP 139和445端口。...

Design/Logic Flaw

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...

Immunity Canvas: MS09_022

Name| ms09022 ---|--- CVE| CVE-2009-0228 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Overflow Notes| CVE Name: CVE-2009-0228 VENDOR: Microsoft MSADV: MS09-022 Repeatability: One shot Note: A string is non-zero terminated after a wcsncpy, ending up in a miscalculation before ...

CVE-2009-0228

Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service win32spl.dll in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing data structures," aka...

Stack overflow

Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service win32spl.dll in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing data structures," aka...