Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Reader allows users to view and print documents in portable documen...

Debian Security Advisory DSA 246-1 (tomcat)

The remote host is missing an update to tomcat announced via advisory DSA 246-1. OpenVAS Vulnerability Test $Id: deb2461.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 246-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 949-1 (crawl)

The remote host is missing an update to crawl announced via advisory DSA 949-1. Steve Kemp from the Debian Security Audit project discovered a security related problem in crawl, another console based dungeon exploration game in the vein of nethack and rogue. The program executes commands insecure...

openSUSE 10 Security Update : acroread (acroread-2506)

The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes : CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to code execution. CVE-2007-0044: Universal Cross Site Request Forgery CSRF problems...

bind security update

CentOS Errata and Security Advisory CESA-2007:0044-01 Updated bind packages that fix a security issue and a bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of th...

Debian DSA-942-1 : albatross - design error

A design error has been discovered in the Albatross web application toolkit that causes user-supplied data to be used as part of template execution and hence arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 949-1] New crawl packages fix potential group games execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 949-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2006 http://www.debian.org/security/faq -...

CVE-2006-0044

The CVE-2006-0044 issue affects Albatross web application toolkit prior to 1.33, where context.py contains a design/implementation flaw in handling template files and submitted form fields that enables remote code execution. Attack language is unspecified in some sources, but Debian/DSA advisorie...

[SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 942-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...

CVE-2005-0044

CVE-2005-0044 is the Input Validation Vulnerability in the Windows OLE component that could allow remote code execution. The NVD/NVD-derived data unify that the issue affects Windows 98, 2000, XP, and Server 2003, as well as Exchange Server 5.0–2003, caused by improper validation of message lengt...

CVE-2004-0044

Cisco Personal Assistant 1.4(1) and 1.4(2) are affected. The issue arises when the product’s configuration uses the Corporate Directory settings tied to Cisco CallManager’s directory service and the setting “Allow Only Cisco CallManager Users” is enabled; this causes password authentication to be...

CVE-2004-0044

Cisco Personal Assistant 1.41 and 1.42 disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username...

CVE-2004-0044

Cisco Personal Assistant 1.41 and 1.42 disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username...

CVE-2003-0044

CVE-2003-0044 covers multiple cross-site scripting (XSS) vulnerabilities in the Jakarta Tomcat 3.x line (through 3.3.1a) affecting the (1) examples and (2) ROOT web applications. Remote attackers could inject arbitrary script/HTML due to XSS in these components. This is documented across sources ...

CVE-2002-0044

GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files...

CVE-2002-0044

CVE-2002-0044 affects GNU Enscript up to version 1.6.1. The vulnerability arises from insecure handling of temporary files (symlink-based attack), enabling local users to overwrite arbitrary files owned by the Enscript user. Public references in Debian DSA-105-1, Mandrake MDKSA-2002:010, and (old...

CVE-2001-0044

The CVE-2001-0044 entry concerns Lexmark MarkVision printer driver components; specifically, multiple buffer overflows in cat_network, cat_paraller, and cat_serial allow local users to gain privileges via long command arguments. The root cause is a buffer overflow in argument handling within thes...

CVE-2000-0044

The CVE-2000-0044 entry concerns War FTP Daemon versions 1.70 and 1.67b2, where macros allow local or remote attackers to read arbitrary files or execute commands. The connected records confirm the affected product/version and the underlying impact, but they do not provide a concrete remediation ...

CVE-2000-0044

Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands...

CVE-1999-0044

The vulnerability CVE-1999-0044 affects the fsdump command in IRIX, enabling a local user to obtain root access by modifying sensitive files. The connected sources reiterate this description but do not provide specific affected IRIX versions, root-causes details, or a published fix. No remediatio...