Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

clamav -- Multiple Vulnerabilities

Secunia reports: Some vulnerabilities have been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service or to compromise a vulnerable system. 1 A boundary error exists within the "cliscanpe" function in libclamav/pe.c. This can be exploited to cause a...

HP Openview Network Node Manager ovwparser.dll buffer overflow

Added: 04/14/2008 CVE: CVE-2008-1697 BID: 28569 OSVDB: 43992 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A vulnerability in ovwparser.dll allows remote attackers to execute arbitrary commands by sending a request for a long,...

Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

HP Openview Network Node Manager ovwparser.dll buffer overflow

Added: 04/14/2008 CVE: CVE-2008-1697 BID: 28569 OSVDB: 43992 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A vulnerability in ovwparser.dll allows remote attackers to execute arbitrary commands by sending a request for a long,...

Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

HP OpenView Network Node Manager (OV NNM) 7.x - OpenView5.exe?Action Traversal Arbitrary File Access

HP OpenView Network Node Manager OV NNM 7.x - OpenView5.exe?Action Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/28745/info HP OpenView Network Node Manager is prone to multiple vulnerabilities affecting the 'ovalarmsrv.exe' and 'ovtopmd.exe' processes. These issues...

[Full-disclosure] Pligg 9.9.0 editlink.php SQL Injection Vulnerability

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

XnView 1.92.1 Slideshow (FontName) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English...

xnview1921-overflow.txt

!/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English Found by : Stefan Cornelius, Secunia Research...

XnView 1.92.1 - 'FontName' Slideshow Buffer Overflow

!/usr/bin/perl ================================================================ XnView 1.92.1 Slideshow "FontName" Buffer Overflow ================================================================ Calc execution POC Exploit for WinXP SP1 pro English Found by : Stefan Cornelius, Secunia Research...

Sympa Malformed Content-Type Header Remote DoS

According to its banner, the version of Sympa installed on the remote host contains a flaw that causes sympa.pl to crash when sending a text digest if it encounters a message with a malformed Content-Type header. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

Panda Security cpoint.sys Kernel Memory Corruption

A vulnerability in the 'Cpoint.sys' kernel driver shipped with Panda Antivirus+ Firewall 2008 and Panda Internet Security 2008 fails to sufficiently validate IOCTL requests before processing them. A local attacker may be able to leverage this issue to execute arbitrary code with kernel privileges...

Sun Java Web Console < 3.0.5 Remote File Enumeration

According to its version, the installation of Sun Java Web Console on the remote host may allow a local or remote unprivileged user to determine the existence of files or directories in access restricted directories, which could result in a loss of confidentiality. C Tenable Network Security, Inc...

CentOS 4 / 5 : evolution (CESA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

WebCT 4.x Javascript Session Stealer

WebCT 4.x Javascript Session Stealer Exploits Software: WebCT Campus Edition 4.x http://secunia.com/product/3280/ Affected Version: 4.1.5.8 Discoverer: Benjamin "balupton" Lupton Date Discovered: November 2005 Date Reported: 25/06/2007 Software Author Contacted again on: 20/07/2007 Date Published...

Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...

RHEL 4 / 5 : evolution (RHSA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...