PT-2009-6113 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.27 Description: The issue concerns the megaraid sas driver in the Linux kernel, where the dbg lvl file has world-writable permissions. This allows local users to modify the file, which in turn enables them t...

AIX 530009 : U825258

The remote host is missing AIX PTF U825258 which is related to the security of the package bos.rte.bindcmds You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

KLA10094 DoS vulnerabilities in CA products

An unspecified vulnerability was found in CA products. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to arclib via a specially designed RAR archive. Original...

PT-2009-6124 · Cherokee · Cherokee Web Server

Name of the Vulnerable Software and Affected Versions: Cherokee Web Server versions 0.5.4 and earlier Description: A directory traversal issue allows remote attackers to read arbitrary files by including a /.. slash backslash dot dot in the URL. Recommendations: For Cherokee Web Server versions...

KLA10374 ACE vulnerability in UiTV UiPlayer

A buffer overflow was found in UiTV UiPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename parameter. Original advisories - Related products UiTV-UiPlayer CVE list CVE-2009-2970 critical...

PT-2009-2791 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 through 3.5 Description: A remote code execution issue exists due to the improper enforcement of a type-equality constraint in .NET verifiable code. This allows remote attackers to execute arbitrary code...

KLA10333 DoS vulnerability in TFTP

An unspecified vulnerability was found in the TFTP Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Exploitation Public exploits exist for this vulnerability...

RedHat Security Advisory RHSA-2009:1428

The remote host is missing updates announced in advisory RHSA-2009:1428. The XML Security Library is a C library based on libxml2 and OpenSSL. It implements the XML Signature Syntax and Processing and XML Encryption Syntax and Processing standards. HMAC is used for message authentication using...

DotNetNuke 4.4.1 <= 4.8.4 Identity Authentication Bypass Vulnerability

DotNetNuke is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MDVA-2009:155 : beagle

The mozilla-thunderbird-beagle package was not rebuilt for mozilla-thunderbird 2.0.0.23. This update solves this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

JVN#31035930 SugarCRM vulnerable to SQL injection

SugarCRM is a customer relationship management CRM software. SugarCRM contains a SQL injection vulnerability. Impact As a result of SQL injection, contents within the database can be compromised. Solution Update the Software Update to the latest version according to the information provided by th...

Cross-site request forgery vulnerability in FreeNAS

Overview FreeNAS contains a cross-site request forgery vulnerability. FreeNAS is a NAS Network Attached Storage server software. FreeNAS contains a cross-site request forgery vulnerability. Hiroyuki Shinshiba of LAC:Little eArth Corporation Co., LTD. reported this vulnerability to IPA. JPCERT/CC...

WordPress / WordPress MU Multiple Vulnerabilities (Jul 2009)

WordPress / WordPress MU is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA10164 DoS vulnerability in Foxit Reader

Improper string handling was found in Foxit Reader. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF file. Original advisories - Related products Foxit-Reader...

Solaris Update for uucp 111570-04

Check for the Version of uucp OpenVAS Vulnerability Test Solaris Update for uucp 111570-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

PT-2009-1291 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.39 Apache Tomcat versions 5.5.0 through 5.5.27 Apache Tomcat versions 6.0.0 through 6.0.18 Description: The issue allows remote attackers to bypass intended access restrictions and conduct directory...

Solaris Update for kernel 120011-14

Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 120011-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Lighttpd <= 1.4.23 'Trailing Slash' Information Disclosure Vulnerability

Lighttpd is prone to an information disclosure vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CentOS Security Advisory CESA-2009:1059 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1059. CESA-2009:1059 64051 4 $Id: ovcesa20091059.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1059 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

KLA10172 Vulnerability in Garmin Communicator Plugin

An improper restriction was found in Garmin Communicator Plug-In. By exploiting this vulnerability malicious users can obtain sensitive information or reconfigure GPS device. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products...