[SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Nico Golde July 31nd, 2010 http://www.debian.org/security/faq -...

SigPlus Pro ActiveX Control 'LCDWriteString()' Buffer Overflow Vulnerability

This host is installed with SigPlus Pro ActiveX Control and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsigplusproactivexcontrolbofvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ SigPlus Pro ActiveX Control 'LCDWriteString' Buffer Overflow Vulnerability Authors: Soor...

CVE-2010-2974

Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server WAS before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment IDE and the InFusion...

CVE-2010-2974

The CVE-2010-2974 issue is a stack-based buffer overflow in the IConfigurationAccess interface of the Wonderware ArchestrA ConfigurationAccessComponent ActiveX control used by Wonderware Application Server (WAS) and related IDE/IEE. Affected software runs prior to 3.1 SP2 P01. An attacker can sup...

CVE-2010-2709

Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie...

CVE-2010-2709

Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie...

Novell iPrint Client Browser Plugin operation Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Novell iPrint Client Browser Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Debian DSA-2079-1 : mapserver - several vulnerabilities

Several vulnerabilities have been discovered in mapserver, a CGI-based web framework to publish spatial data and interactive mapping applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2539 A stack-based buffer overflow in the msTmpFile...

CVE-2009-4962

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information...

CVE-2010-2703

Stack-based buffer overflow in the execvpnc function in the ov.dll module in HP OpenView Network Node Manager OV NNM 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe...

CVE-2009-4962

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information...

CVE-2009-4964

CVE-2009-4964 describes a stack-based buffer overflow in KSP 2006 FINAL that allows remote code execution via a long string in a .M3U playlist file. The vulnerability is triggered by crafted playlist data, with a CVSS v2 base score of 9.3 (HIGH) indicating NETWORK attack vector, no authentication...

EasyFTP Server list.html path Stack Buffer Overflow

This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11 and earlier. EasyFTP fails to check input size when parsing the 'path' parameter supplied to an HTTP GET request, which leads to a stack based buffer overflow. EasyFTP allows anonymous access by default; valid credentia...

httpdx - 'h_handlepeer()' Remote Buffer Overflow (Metasploit)

$Id: httpdxhandlepeer.rb 9934 2010-07-26 23:22:42Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Easy FTP Server v1.7.0.11 LIST Command Remote BoF Exploit (Post Auth)

Exploit for php platform in category remote exploits ============================================================================== Easy FTP Server v1.7.0.11 LIST Command Remote BoF Exploit Post Auth - meta ============================================================================== EDB-ID: 144...

Mandriva Update for ghostscript MDVSA-2010:134 (ghostscript)

Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDVSA-2010:134 ghostscript Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Winamp < 5.58 Buffer Overflow

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.58. Such versions are reportedly affected by a stack-based buffer overflow vulnerability when parsing VP6 video content. An attacker, exploiting this flaw, can execu...

CVE-2009-4931

CVE-2009-4931 describes a stack-based buffer overflow in Groovy Media Player 1.1.0 triggered by a long string in an .m3u playlist, allowing remote attackers to cause an application crash or potentially execute arbitrary code. Multiple sources (NVD, OpenVAS NASL entries) corroborate the condition ...

CVE-2010-1929

CVE-2010-1929 is a stack-based buffer overflow in Novell iManager's jclient (jclient.dll) within the Tomcat web container, exploitable by remote authenticated users via the EnteredClassID or NewClassName parameters to nps/servlet/webacc. Several connected sources tie this to a broader set of iMan...

Novell iManager Multiple Vulnerabilities

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id:...