790 matches found
CVE-2011-0765
CVE-2011-0765 affects Layer Four Traceroute (LFT) on the Linux/Unix ecosystem: Unspecified vulnerability in the lft component of LFT 3.x before 3.3 allows local users to gain privileges via a crafted command line. Connected sources indicate the issue is a local privilege escalation in LFT prior t...
pWhois Layer Four Traceroute 3.x vulnerability
Overview Given a specific set of command line arguments, Layer Four Traceroute lft will produce a segmentation fault leading to a possible privilege escalation vulnerability. Description pWhois Layer Four Traceroute 3.x contains a vulnerability when parsing command line arguments. Earlier version...
targets-traceroute NSE Script
Inserts traceroute hops into the Nmap scanning queue. It only functions if Nmap's --traceroute option is used and the newtargets script argument is given. Script Arguments newtargets If specified, adds traceroute hops onto Nmap scanning queue. max-newtargets See the documentation for the target...
Solaris 10 (x86) : 144048-01 (deprecated)
SunOS 5.10x86: traceroute patch. Date this patch was last updated by Sun : Sep/01/10 This plugin has been deprecated and either replaced with individual 144048 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Host Summary
This VT summarizes technical information about the scanned host collected during the scan. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Nagios3 - 'statuswml.cgi' 'Ping' Command Execution (Metasploit)
$Id: nagios3statuswmlping.rb 9829 2010-07-14 18:23:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Nagios statuswml.cgi Command Injection
Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...
CVE-2009-4368
Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...
Authentication flaw
Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...
CVE-2009-4368
Centreon before 2.1.4 has multiple vulnerabilities in the ping, traceroute, and LDAP import components, likely related to improper authentication. Affects Centreon installations running versions prior to 2.1.4. Remediation: upgrade to Centreon 2.1.4 or apply the vendor patch (VendorFix). No explo...
CVE-2009-4368
Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...
Fedora 10 : php-pear-Net-Traceroute-0.21.2-1.fc10 (2009-12083)
Upstream changelog: QA Release: Prevent command injection kguest CVE-2009-4025 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 11 : php-pear-Net-Traceroute-0.21.2-1.fc11 (2009-11617)
Upstream changelog: QA Release: Prevent command injection kguest CVE-2009-4025 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 12 : php-pear-Net-Traceroute-0.21.2-1.fc12 (2009-11551)
Upstream changelog: QA Release: Prevent command injection kguest CVE-2009-4025 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Design/Logic Flaw
Argument injection vulnerability in the traceroute function in Traceroute.php in the NetTraceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4025
Argument injection vulnerability in the traceroute function in Traceroute.php in the NetTraceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information...
PEAR Net_Traceroute: Command injection
Background PEAR NetTraceroute is an OS independent wrapper class for executing traceroute calls from PHP. Description Pasquale Imperato reported that the $host parameter to the traceroute function in Traceroute.php is not properly sanitized before being passed to exec. Impact A remote attacker...
[SECURITY] Fedora 12 Update: php-pear-Net-Traceroute-0.21.2-1.fc12
OS independent wrapper class for executing traceroute calls...