Computer Associates WebScan ActiveX Control Multiple RCE Vulnerabilities

CA PSFormX or WebScan ActiveX controls is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Adobe Reader Overly Complex U3D Base Mesh Memory Corruption (APSB10-09; CVE-2010-0194)

The vulnerability is due to the way Adobe Reader and Acrobat parse a PDF file containing an overly complex U3D "Base Mesh" stream. A remote attacker could trigger this issue via a specially crafted PDF file. Successful exploitation will create a denial of service condition, causing the applicatio...

Microsoft Data Analyzer ActiveX Control Vulnerability (978262)

This host is missing a critical security update according to Microsoft Bulletin MS10-008. OpenVAS Vulnerability Test $Id: secpodms10-008.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Data Analyzer ActiveX Control Vulnerability 978262 Authors: Veerendra GG Updated By: Madhuri D on 2010-11-22 - To...

Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities

Adobe Shockwave Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AIX 530010 : U823211

The remote host is missing AIX PTF U823211 which is related to the security of the package bos.sysmgt.sysbr You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Linux Kernel 'rds_recvmsg()' Function Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits / rdsclient.c / int mainvoid int sockfd; struct sockaddrin serverAddr; struct sockaddrin toAddr; char recvBuffer128 = "data from client"; struct msghdr msg; struct iovec iov; sockfd = socketAFRDS, SOCKSEQPACKET, 0; if sockfd iovbase =...

AIX 530008 : U829534

The remote host is missing AIX PTF U829534 which is related to the security of the package bos.sysmgt.nim.client You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Adobe RoboHelp Server Unspecified Vulnerability

This host is running Adobe RoboHelp Server and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbadoberobohelpserverunspecifiedvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Adobe RoboHelp Server Unspecified Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbo...

OpenOffice.org Word Documents Parsing Buffer Overflow Vulnerability (Windows)

The host has OpenOffice installed and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbopenofficewordbofvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenOffice.org Documents Parsing Buffer Overflow Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 20...

Microsoft Internet Information Server (IIS) FTP server NLST stack buffer overflow

Overview The Microsoft IIS FTP server contains a stack buffer overflow in the handling of directory names, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description IIS is a web server that comes with Microsoft Windows. IIS also includes FTP server...

2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities

This host is running 2532-Gigs and is prone to Directory Traversal and SQL Injection Vulnerabilities. OpenVAS Vulnerability Test $Id: gb2532gigsmultvulnaug09.nasl 4865 2016-12-28 16:16:43Z teissa $ 2532|Gigs Directory Traversal And SQL Injection Multiple Vulnerabilities Authors: Antu Sanadi...

McAfee 3.6.0.608 naPolicyManager.dll ActiveX Arbitrary Data Write Vuln

No description provided by source. GOODFELLAS Security Research TEAM http://goodfellas.shellcode.com.ar Greetings to str0ke McAfee, Inc. 3.6.0.608 Policy Manager naPolicyManager.dll Arbitrary Data Write ============================================================================== Internal ID:...

Adobe Reader PDF Documents Containing Embedded JBIG2 Streams (CVE-2009-0509; CVE-2009-0510; CVE-2009-0511; CVE-2009-0512)

Portable Document Format PDF is an open file format created by Adobe Systems. Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain a JBIG2 stream. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful...

FreeBSD-SA-09:09.pipe

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:09.pipe Security Advisory The FreeBSD Project Topic: Local information disclosure via direct pipe writes Category: core Module: kern Announced: 2009-06-10...

Preemptive Protection against Adobe Reader JavaScript getAnnots Method Memory Corruption Vulnerability

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file. Portable Document Format PDF is an open file format created by Adobe Systems. It is...

AIX 610001 : U819845

The remote host is missing AIX PTF U819845 which is related to the security of the package bos.loc.com.JP You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

webEdition 6.0.0.4 Local File Inclusion

Salvatore "drosophila" Fresta + Application: webEdition + Version: = 6.0.0.4 + Website: http://www.webedition.de + Bugs: A Local File Inclusion + Exploitation: Remote + Date: 31 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

Postfix 2.6-20080814 - 'symlink' Local Privilege Escalation

!/bin/sh "rspocfix.sh" PoC for Postfix local root vulnerability: CVE-2008-2936 by Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt Tested: Ubuntu / Debian Madrid, 30.Aug.2008 Config writabledir=/tmp spooldir=/var/mail Use "postconf mailspooldirectory" to obtain this user=root target=/etc/passwd...

Update Protection against CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow Vulnerability

A buffer overflow vulnerability has been discovered in CA BrightStor ARCserve Backup. Computer Associates CA provides a group of security and management products for enterprise as well as individual clients. CA BrightStor ARCserve Backup provides centralized control over a series of distributed...

HP Online Support Services ActiveX DownloadFile() arbitrary file download

Overview The HP Online Support Services ActiveX control contains a method called DownloadFile. This may allow a remote, unauthenticated attacker to download files to the location of the ActiveX control. Description HP Services provides online product support services including HP Instant Support...