bind (important)

specially crafted DNS queries could crash the bind name server CVE-2011-4313...

GLSA-201111-09 : Perl Safe module: Arbitrary Perl code injection

The remote host is affected by the vulnerability described in GLSA-201111-09 Perl Safe module: Arbitrary Perl code injection Unsafe code evaluation prevents the Safe module from properly restricting the code of implicitly called methods on implicitly blessed objects. Impact : A remote attacker...

Multiple Products NCTAudioFile2 ActiveX Control Buffer Overflow (CVE-2007-0018)

A remote code execution vulnerability has been reported in the NCTAudioFile2 ActiveX control. The vulnerability is due to a data validation failure by the NCTAudioFile2 ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted...

EtherApe RPC Packet Processing Denial of Service Vulnerability

This host is installed with EtherApe and is prone to denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbetheraperpccallparsingdosvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ EtherApe RPC Packet Processing Denial of Service Vulnerability Authors: Rachana Shetty Copyright:...

Mini-Stream 3.0.1.1 Buffer Overflow

This module exploits a stack buffer overflow in Mini-Stream 3.0.1.1 By creating a specially crafted pls file, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Juniper Networks IVE ActiveX Control Buffer Overflow (CVE-2006-2086)

A buffer overflow vulnerability has been reported in Juniper Networks IVE. The vulnerability is due to a boundary error within an ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted web-page. Successful exploitation would allo...

Sybase Open Server Null Byte Stack Memory Corruption

A remote code execution vulnerability has been reported in Sybase Open Server. The vulnerability is due to an error in the processing of malformed login packets by the server. A remote attacker may exploit this vulnerability by sending a specially crafted packet to an affected Sybase server...

Tom Sawyer ActiveX Control Memory Corruption (CVE-2011-2217)

A code execution vulnerability has been reported in Tom Sawyer. The vulnerability is due to an error while instantiating the ActiveX control in a browser. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation of this...

Apache HTTPD mod_proxy Information Disclosure (CVE-2011-3368)

An information disclosure vulnerability has been reported in Apache httpd server. The vulnerability is due to insufficient input validation by the server while using the RewriteRule or ProxyPassMatch directives. A remote attacker may exploit this vulnerability by sending a series of specially...

SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7755)

The following bug has been fixed : - Specially crafted AJP messages could have been used to bypass authentication. CVE-2011-3190 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Microsoft Office Web Components DataSource Code Execution (MS08-017; CVE-2007-1201)

A remote code execution vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to insufficient verification of the control's DataSource path. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a specially crafted web-pag...

Microsoft Windows Ancillary Function Driver Privilege Elevation Vulnerability (2592799)

This host is missing an important security update according to Microsoft Bulletin MS11-080. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Internet Explorer Option Element Memory Corruption (MS11-081; CVE-2011-1996)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer attempts to access objects that have not been initialized or have been deleted. A remote attacker could trigger this vulnerability by enticing an...

CA ARCserve D2D GWT RPC Request Credentials Disclosure (CVE-2011-3011)

A credentials disclosure vulnerability has been reported in CA ARCserve D2D. The vulnerability is due to an error while processing Google Web Toolkit GWT RPC requests. A remote attacker can exploit this vulnerability by sending a specially crafted RPC request to an affected server. Successful...

Ubuntu 10.04 LTS / 10.10 / 11.04 : gimp vulnerability (USN-1214-1)

Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracte...

MetaServer RT Multiple Remote Denial of Service Vulnerabilities

MetaServer RT is prone to multiple remote denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ACDSee FotoSlate PLP File id Parameter Overflow

This module exploits a buffer overflow in ACDSee FotoSlate 4.0 Build 146 via a specially crafted id parameter in a String element. When viewing a malicious PLP file with the ACDSee FotoSlate product, a remote attacker could overflow a buffer and execute arbitrary code. This exploit has been teste...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Microsoft Windows TCP/IP Stack Denial of Service Vulnerability (2563894)

This host is missing an important security update according to Microsoft Bulletin MS11-064. OpenVAS Vulnerability Test $Id: secpodms11-064.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows TCP/IP Stack Denial of Service Vulnerability 2563894 Authors: Veerendra GG Copyright: Copyright c 2011...

BlackBerry Enterprise Server PNG and TIFF Image Processing Vulnerabilities (KB27244)

The version of BlackBerry Enterprise Server on the remote host reportedly contains multiple remote code execution vulnerabilities in its image processing library : - An unspecified error within the BlackBerry MDS Connection Service when processing PNG and TIFF images on a web page being viewed on...