USN-794-1: Perl vulnerability

It was discovered that the Compress::Raw::Zlib Perl module incorrectly handled certain zlib compressed streams. If a user or automated system were tricked into processing a specially crafted compressed stream or file, a remote attacker could crash the application, leading to a denial of service...

openSUSE 10 Security Update : perl-Compress-Raw-Zlib (perl-Compress-Raw-Zlib-6300)

A Buffer overflow in the Compress::Raw::Zlib perl module has been fixed. CVE-2009-1391 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-Compress-Raw-Zlib-6300. The text description of this...

Fedora Core 11 FEDORA-2009-6033 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-6033 (perl)

The remote host is missing an update to perl announced via advisory FEDORA-2009-6033. OpenVAS Vulnerability Test $Id: fcore20096033.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6033 perl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Heap overflow

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

CVE-2009-1391

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

CVE-2009-1391

CVE-2009-1391 affects Perl’s Compress-Raw-Zlib (base module in perl-Compress-Raw-Zlib) and related Compress-Raw-Bzip2, via an off-by-one in the inflate function (Zlib.xs) that can trigger a heap-based buffer overflow, causing DoS (hang/crash). The issue impacted Perl-based products using these mo...

CVE-2009-1391

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

Fedora 11 : perl-5.10.0-69.fc11 (2009-6033)

Off-by-one overflow in Compress::Raw::Zlib CVE-2009-1391 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

'Compress::Raw::Zlib' Perl模块远程代码执行漏洞

Bugraq ID: 35307 CVE ID：CVE-2009-1391 CNCVE ID：CNCVE-20091391 Compress::Raw::Zlib是一款Zlib压缩库提供perl低级接口的模块。 Compress::Raw::Zlib inflate存在缓冲区溢出，远程攻击者可以利用漏洞使应用程序崩溃或以应用程序权限执行任意指令。 Zlib.xs中的"inflate"函数存在单字节错误，当处理特殊构建的压缩数据时存在堆缓冲区溢出，可导致perl进程关起或崩溃。 Compress::Raw::Zlib 2.015 Compress::Raw::Zlib 2.014 升级程序...

Compress::Raw::Zlib Perl Module - Remote Code Execution

source: https://www.securityfocus.com/bid/35307/info The 'Compress::Raw::Zlib' Perl module is prone to a remote code-execution vulnerability. Successful exploits may allow remote attackers to execute arbitrary code or cause denial-of-service conditions in applications that use the vulnerable...

Mandriva Linux Security Advisory : qemu (MDVSA-2008:162)

Multiple vulnerabilities have been found in Qemu. Multiple heap-based buffer overflows in the cirrusinvalidateregion function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to...

Mandriva Update for qemu MDVSA-2008:162 (qemu)

Check for the Version of qemu OpenVAS Vulnerability Test Mandriva Update for qemu MDVSA-2008:162 qemu Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for qemu MDVSA-2008:162 (qemu)

Check for the Version of qemu OpenVAS Vulnerability Test Mandriva Update for qemu MDVSA-2008:162 qemu Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

TCP SYN Port Scanner

Enumerate open TCP services using a raw SYN scan. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TCP SYN Port Scanner', 'Description' = %q Enumerate open TCP services using a raw SYN scan. ,...

openSUSE 10 Security Update : xterm (xterm-5902)

XTerm evaluated various ANSI Escape sequences so that command execution was possible if an attacker could pipe raw data to an xterm. CVE-2008-2383 It is usually not recommended to display raw data on an xterm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

createdirectory2sysdba.sql

--note windows adds 0D 0A to end as cTRL LF --WINDOWS VERSION 10.1 DECLARE fi UTLFILE.FILETYPE; bu RAW32767; bu2 varchar232767; bu3 varchar232767; BEGIN...

openSUSE 10 Security Update : qemu (qemu-5270)

Local attackers could use raw formatted disk images to access the hosting environment. CVE-2008-2004 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update qemu-5270...

Samba client buffer overflow

Heap-based buffer overflow in the receivesmbraw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response...

qemu/kvm/xen: qemu block format auto-detection vulnerability

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...