4543 matches found
IBM DB2 8.1 < Fix Pack 18 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 8.1 running on the remote host is affected by one or more of the following issues : - A local attacker may be able to gain write access to an arbitrary file using DAS, which could lead to gaining root privileges. IZ34149 - It may be possible t...
Microsoft Windows WINS Remote Code Execution Vulnerability (969883)
This host is missing a critical security update according to Microsoft Bulletin MS09-039. OpenVAS Vulnerability Test $Id: secpodms09-039.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows WINS Remote Code Execution Vulnerability 969883 Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
Microsoft Windows WINS Remote Code Execution Vulnerability (969883)
This host is missing a critical security update according to Microsoft Bulletin MS09-039. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Null pointer dereference
Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is 1 0, which triggers a server crash related to memory allocation, or 2 1, which triggers CPU/memory...
CVE-2009-2549
Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is 1 0, which triggers a server crash related to memory allocation, or 2 1, which triggers CPU/memory...
Sguil/PADS Remote Server Crash Vulnerability
No description provided by source. Sguil/PADS Denial of Service exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. More in-depth article available at: http://allmybase.com/?p=72 This mo...
Sguil/PADS - Remote Server Crash
Sguil/PADS Denial of Service exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. More in-depth article available at: http://allmybase.com/?p=72 This more in-depth article does include...
Sguil/PADS SQL Injection / Server Crash Vulnerability
Exploit for multiple platform in category dos / poc ===================================================== Sguil/PADS SQL Injection / Server Crash Vulnerability ===================================================== Sguil/PADS SQL injection and server crash exploit by Ataraxia Benjamin Rose Public...
America's Army 3 Null Pointer
Luigi Auriemma Application: America's Army 3 http://www.americasarmy.com/aa3.php Versions: = 3.0.4 Platforms: Windows Bug: NULL pointer Exploitation: remote, versus server Date: 06 Jul 2009 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...
Denial Of Service Vulnerability in OpenSSL (Jun 2009) - Linux
OpenSSL is prone to a Denial of Service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
MDVA-2008:126 : x11-server
A Xvnc server running in 16 bpp depth would crash when a client with 16 bpp depth connected. Also, keyboard behaviour was incorrect when the X server was run with Xkb extension disabled. This update fixes both issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...
Integer overflow
Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...
CVE-2008-6704
The CVE-2008-6704 entry concerns an integer overflow in the NET_Compressor::Decompress function of S.T.A.L.K.E.R.: Shadow of Chernobyl (versions 1.0006 and earlier). A remote attacker can trigger a denial of service (server crash) by sending a crafted packet with a 0xC1 value that contains no com...
Mandriva Update for x11-server MDKA-2007:048 (x11-server)
Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDKA-2007:048 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Mandriva Update for x11-server MDVA-2008:117 (x11-server)
Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVA-2008:117 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Mandriva Update for x11-server MDVA-2008:117 (x11-server)
Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVA-2008:117 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
MySQL 6.0 < 6.0.10 XPath Expression DoS
The version of MySQL 6.0 installed on the remote host is earlier than 6.0.10 and thus affected by a denial of service vulnerability. Specifically, an authenticated user can cause an assertion failure leading to a server crash by calling 'ExtractValue' or 'UpdateXML' using an XPath expression...
RedHat Update for samba RHSA-2007:1114-01
Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2007:1114-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
MySQL Community Server 5.0 < 5.0.67 Multiple Vulnerabilities
The version of MySQL Community Server 5.0 installed on the remote host is before 5.0.66. Such versions are reportedly affected by the following issues : - When using a FEDERATED table, a local server could be forced to crash if the remote server returns a result with fewer columns than expected B...
MySQL 6.0 < 6.0.6 Empty Bit-String Literal Token SQL Statement DoS
The version of MySQL 6.0 installed on the remote host is earlier than 6.0.6. A bug in such versions can lead to a server crash in 'Itembinstring::Itembinstring' when handling an empty bit-string literal b''. Using a simple SELECT statement, an authenticated remote user can leverage this issue to...