RHEL 4 : php (RHSA-2007:0076)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0076 advisory. - security flaw CVE-2007-0906, CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 - php session extension information...

CVE-2007-0076

CVE-2007-0076 affects Openforum where the backend database (openforum.mdb) is stored under the web root due to insufficient access control. This allows remote attackers to download the database containing user passwords. The CVE is documented with a CVSSv2 base score of 7.5 (HIGH): Network attack...

CVE-2006-0076

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2006-0076

This CVE (CVE-2006-0076) relates to oaBoard 1.0: a PHP remote file inclusion flaw in forum.php where an input parameter inc can be controlled via URL to include a PHP file. The underlying issue is unsafely including external input as code, enabling arbitrary PHP execution if a remote file is incl...

CVE-2005-0076

CVE-2005-0076 involves multiple buffer overflows in the XView library 3.2 that can allow local users to execute arbitrary code via setuid-enabled applications using the library. Affected component: XView 3.2 (library used by some local-sandboxed/setuid programs). Root cause: buffer overflow in XV...

CVE-2004-0076

This CVE entry is rejected/not used; the candidate number has been removed by the numbering authority.

CVE-2002-0076

CVE-2002-0076 affects the Java Runtime Environment (JRE) Bytecode Verifier. The verifier flaw allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation. Affected are Microsoft VM builds up to 3802 (Internet Explorer 4.x/5.x) and Net...

CVE-2003-0076

CVE-2003-0076 involves an unknown vulnerability in the directory parser of Direct Connect 4 Linux (dcgui) prior to version 0.2.2. The flaw allows remote attackers to read files outside the intended sharelist, indicating a path handling/validation issue in the directory parsing component. Affected...

CVE-2001-0076

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SENDMAIL parameter, which overwrites an internal program variable that references a program to be executed...

CVE-2001-0076

CVE-2001-0076 affects Ikonboard (register.cgi)

CVE-2000-0076

nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover...

CVE-2000-0076

Summary: CVE-2000-0076 affects the nviboot boot script in the Debian nvi package. Local users can delete files through malformed entries in vi.recover. The available records confirm the affected component (nviboot in Debian nvi), the underlying cause (malformed vi.recover entries) and the impact ...

CVE-1999-0076

CVE-1999-0076 describes a buffer overflow in wu-ftp triggered by the PASV command, causing a core dump. The connected documents corroborate the description but do not provide explicit affected versions or a fixed patch. The vulnerability affects wu-ftp and results in process termination (core dum...

CVE-2000-0076

nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover...