Lucene search
RootSSV:62083HistoryApr 08, 2014 - 12:00 a.m.
Nixu NameSurfer多个安全漏洞
2014-04-0800:00:00
Root
www.seebug.org
189
nixu namesurfer
ipam software
security vulnerabilities
cve-2014-0060
cve-2014-0061
cve-2014-0062
cve-2014-0063
cve-2014-0064
cve-2014-0065
cve-2014-0066
input filtering
html injection
xml entity parsing.
EPSS
0.927
Percentile
99.0%
CVE ID:CVE-2014-0060、CVE-2014-0061、CVE-2014-0062、CVE-2014-0063、CVE-2014-0064、CVE-2014-0065、CVE-2014-0066
Nixu NameSurfer是一个实现集中地址管理覆盖的IPAM软件应用解决方案。
Nixu NameSurfer存在多个安全漏洞：
1，部分输入在使用之前缺少过滤，允许攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。
2，解析XML实体时存在错误，允许攻击者利用特制的包含外部实体引用的XML文档来获取本地资源数据或消耗服务器资源。
3，存在未明错误允许攻击者利用漏洞以"namesurf"用户访问任意文件。
4，该产品绑定的postgreSQL存在多个安全漏洞。
0
Nixu NameSurfer 7.x
Nixu NameSurfer 7.5.2.1版本已修复该漏洞，建议用户下载使用：
http://www.nixusoftware.com/index.php/products/namesurfer
Related
veracode
veracode
Integer Overflow
2019-05-02 05:01:20
Code Execution Using A Race Condition
2019-05-02 05:01:19
Privilege Escalation
2019-05-02 05:01:19
openvas
openvas
Oracle: Security Advisory (ELSA-2014-0249)
2015-10-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-305)
2015-09-08 00:00:00
PostgreSQL Multiple Security Bypass Vulnerability (Jul 2014) - Windows
2014-07-07 00:00:00
nessus
nessus
RHEL 5 : postgresql (RHSA-2014:0249)
2014-03-05 00:00:00
Amazon Linux AMI : postgresql9 (ALAS-2014-306)
2014-03-18 00:00:00
RHEL 5 / 6 : postgresql84 and postgresql (RHSA-2014:0211)
2014-02-26 00:00:00
redhat
redhat
(RHSA-2014:0249) Important: postgresql security update
2014-03-04 00:00:00
(RHSA-2014:0211) Important: postgresql84 and postgresql security update
2014-02-25 00:00:00
(RHSA-2014:0221) Important: postgresql92-postgresql security update
2014-02-27 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerabilities
2014-02-24 00:00:00
securityvulns
securityvulns
[USN-2120-1] PostgreSQL vulnerabilities
2014-02-28 00:00:00
PostgreSQL multiple security vulnerabilities
2014-02-28 00:00:00
APPLE-SA-2014-09-17-5 OS X Server 3.2.1
2014-09-21 00:00:00
kaspersky
kaspersky
KLA10297 Multiple vulnerabilities in PostgreSQL
2014-03-31 00:00:00
centos
centos
postgresql security update
2014-03-04 20:53:33
postgresql, postgresql84 security update
2014-02-25 18:39:58
postgresql92 security update
2014-02-28 01:35:22
oraclelinux
oraclelinux
postgresql security update
2014-03-04 00:00:00
postgresql84 and postgresql security update
2014-02-25 00:00:00
amazon
amazon
Important: postgresql8
2014-03-13 18:12:00
Important: postgresql9
2014-03-13 18:12:00
debian
debian
[SECURITY] [DSA 2865-1] postgresql-9.1 security update
2014-02-20 21:25:41
[SECURITY] [DSA 2864-1] postgresql-8.4 security update
2014-02-20 17:05:33
mageia
mageia
Updated postgresql packages fix multiple security vulnerabilities
2014-05-09 01:29:25
Updated postgresql packages fix multiple vulnerabilities
2014-05-17 04:20:42
osv
osv
postgresql-8.4 - several
2014-02-20 00:00:00
postgresql-9.1 - several
2014-02-20 00:00:00
Red Hat Security Advisory: cfme security, bug fix, and enhancement update
2024-09-15 21:31:56
freebsd
freebsd
PostgreSQL -- multiple privilege issues
2014-02-20 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2014-08-29 00:00:00
huawei
huawei
Security Advisory - Two Buffer Overflow Vulnerabilities in the GaussDB
2017-05-31 00:00:00
Security Advisory - Two Privilege Escalation Vulnerabilities in the GaussDB
2017-05-31 00:00:00
ubuntucve
ubuntucve
cvelist
cvelist
prion
prion
Stack overflow
2014-03-31 14:58:00
Buffer overflow
2014-03-31 14:58:00
Command injection
2014-03-31 14:58:00
cve
cve
nvd
nvd
seebug
seebug
PostgreSQL安全限制绕过漏洞
2014-02-25 00:00:00
PostgreSQL远程栈缓冲区溢出漏洞
2014-02-25 00:00:00
PostgreSQL远程拒绝服务漏洞
2014-02-25 00:00:00
postgresql
postgresql
Vulnerability in core server (CVE-2014-0060)
2014-03-31 14:58:08
Vulnerability in core server (CVE-2014-0064)
2014-03-31 14:58:15
Vulnerability in contrib module (CVE-2014-0066)
2014-03-31 14:58:15
checkpoint_advisories
checkpoint_advisories
PostgreSQL Database SET ROLE Security Bypass (CVE-2014-0060)
2014-03-17 00:00:00
PostgreSQL Database geo_ops path_in Integer Overflow (CVE-2014-0064)
2014-03-17 00:00:00
PostgreSQL Database Datetime Buffer Overflow (CVE-2014-0063)
2014-04-08 00:00:00
debiancve
debiancve
CVE-2014-0061
2014-03-31 14:58:15
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00