Design/Logic Flaw

The inotifyread function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service OOPS via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...

DevIL: User-assisted execution of arbitrary code

Background Developer's Image Library DevIL is a cross-platform image library. Description Stefan Cornelius Secunia Research discovered two boundary errors within the iGetHdrHeader function in src-IL/src/ilhdr.c. Impact A remote attacker could entice a user to open a specially crafted Radiance RGB...

Fedora Update for nspr FEDORA-2007-279

Check for the Version of nspr OpenVAS Vulnerability Test Fedora Update for nspr FEDORA-2007-279 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Dropbox Software Detection

Dropbox is installed on the remote host. Dropbox is an application for storing and synchronizing files between computers, possibly outside the organization. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid35717;...

CVE-2008-4392: Concurrent Execution using Shared Resource with Improper Synchronization

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...

Fedora Update for rsync FEDORA-2008-3060

Check for the Version of rsync OpenVAS Vulnerability Test Fedora Update for rsync FEDORA-2008-3060 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

[SECURITY] Fedora 10 Update: ntp-4.2.4p6-1.fc10

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 9 Update: ntp-4.2.4p6-1.fc9

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

Apache Tomcat RemoteFilterValve Security Bypass Vulnerability

Apache Tomcat Server is running on this host and that is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache Tomcat RemoteFilterValve绕过安全限制漏洞

BUGTRAQ ID: 31698br / CVECAN ID: CVE-2008-3271br / br / Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。br / br / Apache Tomcat在检查IP地址时存在同步问题，在极少的环境下，这可能允许非允许的IP地址绕过RemoteFilterValve过滤器值并访问受保护的内容。仅在使用调试器在两个线程之间强制特定的处理序列的情况下才可以利用这个漏洞。br / Apache Tomcat 5.5.0 Apache Tomcat 4.1.0 - 4.1.31 Apache ------...

CVE-2008-3271

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...

CVE-2008-3271: Undefined Security Weakness

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...

CVE-2008-3646: Concurrent Execution using Shared Resource with Improper Synchronization

The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...

[SECURITY] Fedora 7 Update: rsync-2.6.9-6.fc7

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

MobiLink Server Detection

The remote service is a MobiLink server, a component of the Sybase SQL Anywhere package used for two-way data synchronization. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31718; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2008-0055: Concurrent Execution using Shared Resource with Improper Synchronization

Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges...

RAPI Manager Detection

The remote service supports the Remote Applications Programming Interfaces RAPI protocol and is used by the host to manage connections from Windows Mobile / Windows CE devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if descripti...

Sybase MobiLink远程堆溢出漏洞

BUGTRAQ ID: 27914 Sybase mobilink是用于实现两个数据库之间数据同步的服务器。 MobiLink服务器在处理超长的请求数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 MobiLink服务器在处理用户名、版本和远程ID等字符串时存在堆溢出漏洞。如果远程攻击者在预认证期间向服务器提交了超过128字节的字符串的话，就可能触发这个溢出，导致执行任意指令。 Sybase MobiLink = 10.0.1.3629 厂商补丁： Sybase ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Security fix for the ALT Linux 5 package ruby version 1.8.6-alt3

Jan. 11, 2008 Kirill A. Shutemov 1.8.6-alt3 - branch based git repository - update to ruby186 svn branch revision 14091 - sync with debian 1.8.6.111-2 + CVE-2007-5162 - install libruby.so into /usr/lib bug 13951 - move arch-depended siteruby to /usr/local/ raorn@ - update macros bug 13933 - add...