Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging security and bug fix update 1.2.2

Updated Red Hat Enterprise MRG Messaging packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

CA Products Message Queuing Server Buffer Overflow (CVE-2007-0060)

Computer Associates CA provides numerous product suites that provide network-monitoring functionality, manage network asset discovery, software deployment, and patch management. These capabilities are contained in the CA Unicenter product suites. The numerous components that are provided, contain...

Message Queuing Remote Code Execution Vulnerability (951071) - Remote

This host is missing important security update according to Microsoft Bulletin MS08-065. OpenVAS Vulnerability Test $Id: secpodms08-065remote.nasl 5394 2017-02-22 09:22:42Z teissa $ Message Queuing Remote Code Execution Vulnerability 951071 - Remote Authors: Veerendra GG Copyright: Copyright c 20...

Microsoft Message Queuing (MSMQ) RCE Vulnerability (951071) - Active Check

This host is missing important security update according to Microsoft Bulletin MS08-065. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CA Message Queuing Buffer Overflow (CVE-2005-2668)

Computer Associates CA provides numerous product suites that provide network-monitoring functionality, manage network asset discovery, software deployment, and patch management. These capabilities are contained in the CA Unicenter product suites. The numerous components that are provided, contain...

RedHat Security Advisory RHSA-2009:1689

The remote host is missing updates announced in advisory RHSA-2009:1689. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Cond...

Design/Logic Flaw

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSAQINV...

CVE-2009-1995

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSAQINV...

CVE-2009-1995

CVE-2009-1995 is an Oracle Database vulnerability affecting the Advanced Queuing component (SYS.DBMS_AQ_INV) in Oracle Database 10.2.0.4 and 11.1.0.7. The issue allows remote authenticated users to impact confidentiality and integrity. The connected documents indicate this CVE was addressed in th...

CVE-2009-1995

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMSAQINV...

Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)

This host is missing a critical security update according to Microsoft Bulletin MS09-040. OpenVAS Vulnerability Test $Id: secpodms09-040.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Message Queuing Privilege Escalation Vulnerability 971032 Authors: Nikita MR Updated By: Madhuri D on...

Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)

This host is missing a critical security update according to Microsoft Bulletin MS09-040. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Null pointer dereference

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...

CVE-2009-1922

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...

Microsoft Windows消息队列服务本地权限提升漏洞（MS09-040）

BUGTRAQ ID: 35969 CVECAN ID: CVE-2009-1922 Microsoft Windows是微软发布的非常流行的操作系统。 由于对消息队列服务所发布的IOCTL请求解析中存在缺陷，导致Windows消息队列服务（MSMQ）中存在一个权限提升漏洞。MSMQ服务在将输入数据传递到缓冲区之前没有正确地检查这些字符串。成功利用此漏洞的攻击者可执行任意代码，并可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP2 Microsoft Windows Vista...

MS09-040: Vulnerability in Message Queuing Could Allow Elevation of Privilege (971032)

The remote version of Windows is affected by a vulnerability in the Microsoft Message Queuing Service MSMQ. An attacker with valid login credentials may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges and therefore elevate his privileges. C Tenable Networ...

Microsoft Message Queuing Service NULL Pointer Dereference Local Privilege Escalation Vulnerability

Description The Microsoft Message Queuing service is prone to a local privilege-escalation vulnerability because it fails to adequately handle user-supplied input. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will...

Microsoft Security Bulletin MS09-040 - Important Vulnerability in Message Queuing Could Allow Elevation of Privilege (971032)

Microsoft Security Bulletin MS09-040 - Important Vulnerability in Message Queuing Could Allow Elevation of Privilege 971032 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Windows Message Queuing...

Sql injection

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMSAQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not...

CVE-2009-0992

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMSAQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not...