openSUSE Security Update : xemacs (xemacs-1182)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

GLSA-200908-05 : Subversion: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200908-05 Subversion: Remote execution of arbitrary code Matt Lewis of Google reported multiple integer overflows in the libsvndelta library, possibly leading to heap-based buffer overflows. Impact : A remote attacker with commit...

IBM DB2 8.1 < Fix Pack 18 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 8.1 running on the remote host is affected by one or more of the following issues : - A local attacker may be able to gain write access to an arbitrary file using DAS, which could lead to gaining root privileges. IZ34149 - It may be possible t...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

GLSA-200907-07 : ModPlug: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-07 ModPlug: User-assisted execution of arbitrary code Two vulnerabilities have been reported in ModPlug: dummy reported an integer overflow in the CSoundFile::ReadMed function when processing a MED file with a crafted song...

Wireshark: Multiple vulnerabilities

Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities have been discovered in Wireshark: David Maciejak discovered a vulnerability in packet-usb.c in the USB dissector via a malformed USB Request Block URB CVE-2008-4680. Florent Drouin and David...

Apache Tomcat JK Connector: Information disclosure

Background The Apache Tomcat JK Connector aka modjk connects the Tomcat application server with the Apache HTTP Server. Description The Red Hat Security Response Team discovered that modjk does not properly handle 1 requests setting the "Content-Length" header while not providing data and 2 clien...

Microsoft Office Word Remote Code Execution Vulnerabilities (969514)

This host is missing a critical security update according to Microsoft Bulletin MS09-027. OpenVAS Vulnerability Test $Id: secpodms09-027.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Word Remote Code Execution Vulnerabilities 969514 Authors: Sharath S Copyright: Copyright c 2009...

CUPS 1.3.9 - cupsipp.c Null Pointer Dereference Denial of Service

CUPS 1.3.9 - cupsipp.c Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/35169/info CUPS is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when processing two consecutive IPPTAGUNSUPPORTED tags in specially crafted I...

CTorrent/Enhanced CTorrent Buffer Overflow Vulnerability

CTorrent/Enhanced CTorrent is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200904-17 : Adobe Reader: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-17 Adobe Reader: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in Adobe Reader: Alin Rad Pop of Secunia Research reported a heap-based buffer overflow when processing PDF files...

GLSA-200904-19 : LittleCMS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200904-19 LittleCMS: Multiple vulnerabilities RedHat reported a NULL pointer dereference flaw while processing monochrome ICC profiles CVE-2009-0793. Chris Evans of Google discovered the following vulnerabilities: LittleCMS contai...

WebGlimpse 2.18.7 - DOC Directory Traversal

WebGlimpse 2.18.7 - DOC Directory Traversal source: https://www.securityfocus.com/bid/52651/info WebGlimpse is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal...

Microsoft DirectShow MJPEG Decompression Remote Code Execution (MS09-011; CVE-2009-0084)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. The DirectShow technology performs client-side audio and video sourcing, manipulation and rendering.An MJPEG file is a media file where a number of JPEG images are connected together to create a video stream...

GLSA-200903-40 : Analog: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200903-40 Analog: Denial of Service Diego E. Petteno reported that the Analog package in Gentoo is built with its own copy of bzip2, making it vulnerable to CVE-2008-1372 GLSA 200804-02. Impact : A local attacker could place...

Ubuntu Update for pwlib vulnerability USN-561-1

Ubuntu Update for Linux kernel vulnerabilities USN-561-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5611.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pwlib vulnerability USN-561-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for qt-x11-free vulnerability USN-513-1

Ubuntu Update for Linux kernel vulnerabilities USN-513-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5131.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for qt-x11-free vulnerability USN-513-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Mac OS X mDNSResponder UPnP Location Overflow

This module exploits a buffer overflow that occurs when processing specially crafted requests set to mDNSResponder. All Mac OS X systems between version 10.4 and 10.4.9 without the 2007-005 patch are affected. This module requires Metasploit: https://metasploit.com/download Current source:...

libpng: Multiple vulnerabilities

Background libpng is the official PNG reference library used to read, write and manipulate PNG images. Description Multiple vulnerabilities were discovered in libpng: A memory leak bug was reported in pnghandletEXt, a function that is used while reading PNG images CVE-2008-6218. A memory overwrit...

F-Secure Product(s) Integer Overflow Vulnerability (Linux)

This host is installed with F-Secure Products and is prone to Integer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfsecureprdtsintoverflowvulnlin.nasl 6516 2017-07-04 12:20:47Z cfischer $ F-Secure Products Integer Overflow Vulnerability Linux Authors: Sharath S Copyright: Copyright c...