Fedora 19 : freeradius-2.2.3-7.fc19 (2014-3192)

Fix stack-based buffer overflow flaw in rlmpap module: long password hashes used by the PAP module can cause a buffer overflow which may terminate the server. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

PT-2014-35: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in function hscsconf which could lead possible remote code execution or denial of service. How to fix Update your sofware up to t...

PT-2014-36: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in function hscsconf which could lead possible remote code execution or denial of service. How to fix Update your sofware up to t...

PT-2014-34: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in function hscsconf which could lead possible remote code execution or denial of service. How to fix Update your sofware up to t...

PT-2014-57: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow in pscdasrv.exe module when processing command opcodes on one of the TCP services allows remote attackers to execute arbitrary code or cause a...

PT-2014-32: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in function hscssecurity which could lead possible remote code execution or denial of service. How to fix Update your sofware up ...

PT-2014-37: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in function hscsvalrefs which can lead to dynamic memory corruption. How to fix Update your sofware up to the latest version...

PT-2014-48: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in hscodbcn.exe module when using function unmarshallString for copying data from packet in stack buffer of static size without...

PT-2014-51: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in hscodbcn.exe module using function unmarshallString for copying data from packet in stack buffer of static size without checki...

PT-2014-29: Stack-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Stack-based buffer overflow vulnerability in Honeywell EPKS. Stack-based buffer overflow was discovered in confd.exe module in hscencrfunction which could lead to remote code execution or denial of service. How to fix Update your...

postgresql security update

CentOS Errata and Security Advisory CESA-2014:0249 Updated postgresql packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

RedHat Update for postgresql84 and postgresql RHSA-2014:0211-01

Check for the Version of postgresql84 and postgresql OpenVAS Vulnerability Test RedHat Update for postgresql84 and postgresql RHSA-2014:0211-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

CVE-2014-2013

Stack-based buffer overflow in the xpsparsecolor function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element...

CVE-2014-2013

MuPDF vulnerability CVE-2014-2013 due to a stack-based buffer overflow in xps_parse_color (xps/xps-common.c) on MuPDF ≤ 1.3 with large ContextColor entries in Path elements, permitting remote code execution. Connected advisories (Debian openSUSE Gentoo, etc.) describe fixes by upgrading to a newe...

CVE-2013-3259

CVE-2013-3259 affects INMATRIX Zoom Player prior to 8.7 beta 11. It describes a stack-based buffer overflow caused by a large biClrUsed value in a BMP file, enabling remote arbitrary code execution. The cited sources (NVD, CVE lists) corroborate the vulnerability and impact but do not provide a p...

GetGo Download Manager 4.x Stack Buffer Overflow

RCE Security Advisory http://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: GetGo Download Manager Vendor URL: www.getgosoft.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2014-02-20 Date published: 2014-03-02 CVSSv2 Score: 10,0 AV:N/AC:L/Au:N/C:C/I:C/A:C...

CVE-2014-0774

CVE-2014-0774 affects Schneider Electric OPC Factory Server (OFS) – specifically the OFS Client stack (TLXCDSUOFS33, TLXCDSTOFS33, TLXCDLUOFS33, TLXCDLTOFS33, TLXCDLFOFS33 at 3.35). The root cause is a stack-based buffer overflow in the parsing of a demonstration/configuration file, which can lea...

MGASA-2014-0088 Updated freeradius package fixes security vulnerability

SSHA processing in freeradius before 2.2.3 runs into a stack-based buffer overflow in the freeradius rlmpap module if the password source uses an unusually long hashed password CVE-2014-2015...

VideoCharge Studio 2.12.3.685 Stack Buffer Overflow

RCE Security Advisory http://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: VideoCharge Studio Vendor URL: www.videocharge.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2014-02-08 Date published: 2014-02-19 CVSSv2 Score: 7,6 AV:N/AC:H/Au:N/C:C/I:C/A:C CVE...

CVE-2011-3604

The CVE-2011-3604 issue affects the router advertisement daemon (radvd) process_ra() prior to version 1.8.2, enabling remote attackers to trigger a stack-based buffer over-read that crashes the service. Published advisories confirm the vulnerability exists in radvd and that fixes were delivered i...