ClamAV LZH File Unpacking Denial of Service Vulnerability (Windows)

The host is installed with ClamAV and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbclamavlzhdosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ ClamAV LZH File Unpacking Denial of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbo...

PT-2009-3900 · Squirrelmail · Squirrelmail

Name of the Vulnerable Software and Affected Versions: SquirrelMail versions prior to 1.4.19-1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. This is due to an incomplete fix for a...

Mandrake Security Advisory MDVSA-2009:099 (openafs)

The remote host is missing an update to openafs announced via advisory MDVSA-2009:099. OpenVAS Vulnerability Test $Id: mdksa2009099.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:099 openafs Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Solaris 5.9 (sparc) : 137183-12

Service Provisioning System 6.0x86: Command Line User Interface P. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 7 (sparc) : 106832-02

. Date this patch was last updated by Sun : Mar/11/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

PT-2009-40: JIRA sensitive information disclosure

JIRA lets you prioritise, assign, track, report and audit your 'issues,' whatever they may be — from software bugs and help-desk tickets to project tasks and change requests. Vulnerability Description Positive Technologies Research Team has discovered a sensitive information disclosure...

PT-2009-29: Tribiq CMS Multiple Vulnerabilities

Tribiq CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

Gentoo Security Advisory GLSA 200805-18 (mozilla ...)

The remote host is missing updates announced in advisory GLSA 200805-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

ikiwiki -- empty password security hole

The ikiwiki development team reports: This hole allowed ikiwiki to accept logins using empty passwords to openid accounts that didn't use a password. Upgrading to a non-vulnerable ikiwiki version immediatly is recommended if your wiki allows both password and openid logins...

PT-2008-3304 · Blogator · Blogator-Script

Name of the Vulnerable Software and Affected Versions: Blogator-script version 0.95 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id art parameter in the blogadata/include/sond result.php file. Recommendations: For Blogator-script versi...

Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (948590)

Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 948590 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of these...

PT-2008-2501 · Ibm +1 · Capp-Lspp-Config +2

Name of the Vulnerable Software and Affected Versions: capp-lspp-eal4-config-hp versions prior to 0.65-2 capp-lspp-config in lspp-eal4-config-ibm versions prior to 0.65-2 Description: The issue arises from the Replace function in the capp-lspp-config script, which uses lstat instead of stat to...

PT-2008-1124 · Gentoo Linux · Am-Utils

Name of the Vulnerable Software and Affected Versions: am-utils versions prior to 6.1.5 Description: The issue affects the am-utils package in Gentoo Linux and potentially other distributions, allowing local users to exploit it and compromise the confidentiality, integrity, and availability of...

Debian Security Advisory DSA 1150-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1150-1. A bug has been discovered in several packages that execute the setuid system call without checking for success when trying to drop privileges, which may fail with some PAM configurations. OpenVAS Vulnerability Test...

Solaris 10 (sparc) : 127111-11

SunOS 5.10: kernel patch. Date this patch was last updated by Sun : Mar/20/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

PT-2007-4039 · Mpc Hc Team · Media Player Classic

Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...

PT-2007-3716 · Prototype · Prototypejs

Name of the Vulnerable Software and Affected Versions: prototypejs versions prior to 1.5.1 RC3 Description: The issue allows remote attackers to obtain data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript...

Solaris 2.6 (sparc) : 105084-18

The remote host is missing Sun Security Patch number 105084-18 Solstice X25 9.1 patch. Date this patch was last updated by Sun : Tue Jan 13 01:57:07 MST 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Solaris 5.6 (x86) : 106759-02

PPP 3.0.1: license lock, messages enUS locale, /etc. Date this patch was last updated by Sun : Feb/28/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. ...

Solaris 7 (x86) : 107118-05

. Date this patch was last updated by Sun : Jun/28/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...