EulerOS 2.0 SP8 : gvfs (EulerOS-SA-2019-1768)

According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket witho...

EulerOS 2.0 SP8 : bzip2 (EulerOS-SA-2019-1782)

According to the version of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - BZ2decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.CVE-2019-12900 Note that Tenable Netwo...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2019-1766)

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text fi...

EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2019-1772)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2019-1786)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.CVE-2019-5436...

EulerOS 2.0 SP8 : exempi (EulerOS-SA-2019-1645)

According to the version of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Exempi is vulnerable to an issue that may manifest as a NULL pointer dereference or an out-of-bounds access due to not checking if vector is of...

EulerOS 2.0 SP8 : taglib (EulerOS-SA-2019-1662)

According to the version of the taglib package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based...

EulerOS 2.0 SP8 : python3 (EulerOS-SA-2019-1658)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the...

EulerOS 2.0 SP8 : python2 (EulerOS-SA-2019-1657)

According to the version of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker...

Autodesk VRED contains an unauthenticated remote code execution vulnerability

Overview Autodesk VRED contains an unauthenticated remote code execution vulnerability. Description CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection': Autodesk VRED Professional 2014 contains an unauthenticated remote code execution vulnerability...

Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution

No description provided by source. Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek...

Symantec Workspace Streaming Arbitrary File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'Symantec Workspace Streaming Arbitrary File Upload', 'Description' = %q This module exploits a code executio...

Novell Netware XNFS caller_name xdrDecodeString Code Execution

Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek Research Lab's Website:...

Novell Netware - XNFS caller_name xdrDecodeString Remote Code Execution

Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek Research Lab's Website:...

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provench...

Novell Netware - XNFS.NLM NFS Rename Remote Code Execution

Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provencher Protek Research Lab's Website:...

CVE-2010-4227

The CVE concerns Novell Netware 6.5’s XNFS.NLM (default UDP port 1234). The xdrDecodeString function accepts a signed length and writes NULL terminator, enabling a stack-based buffer overflow that can lead to remote code execution or a denial of service. Published details confirm a remote attacke...

Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Bof

Exploit for windows platform in category web applications ======================================================== Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Bof ======================================================== Title : Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Buffer...

Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service

Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service !/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS Platform: Novell Netware 6.5 SP8 Found by Francis Provencher for Protek Research Lab's http://protekresearch.blogspot.com/ PRL Novell Netware CIFS.nlm...

Novell Netware CIFS And AFP Remote Memory Consumption DoS

Exploit for unknown platform in category dos / poc ========================================================= Novell Netware CIFS And AFP Remote Memory Consumption DoS ========================================================= !/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS...