Mandrake Linux Security Advisory : poppler (MDKSA-2007:020)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : koffice (MDKSA-2007:018)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

Mandrake Linux Security Advisory : pdftohtml (MDKSA-2007:019)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

[ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:019 http://www.mandriva.com/security/ Package : pdftohtml Date : January 18, 2007 Affected: 2006.0, 2007.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in...

CVE-2007-0104

Technical details for CVE-2007-0104 are not publicly available in the provided Connected documents. The OSV/OpenVAS entries discuss related cups/poppler/kde/koffice packages but do not specify affected products, versions, impact, or fixes for this CVE. Monitor for updates.

CVE-2006-0104

CVE-2006-0104 describes a directory traversal vulnerability in TinyPHPForum 3.6 and earlier. The issue enables remote attackers to perform actions such as creating a new user account, creating a new topic, or viewing another user’s profile by manipulating the uname parameter in profile.php. The a...

Fedora Core 2 : squirrelmail-1.4.4-1.FC2 (2005-259)

Multiple issues in squirrelmail CVE-2005-0104 Upgrade to 1.4.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

RHEL 4 : squirrelmail (RHSA-2005:099)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:099 advisory. SquirrelMail is a standards-based webmail package written in PHP4. Jimmy Conner discovered a missing variable initialization in Squirrelmail...

CVE-2005-0104

CVE-2005-0104 is a cross-site scripting (XSS) vulnerability in SquirrelMail’s webmail.php prior to 1.4.4. The issue allows an attacker to inject arbitrary web script or HTML via certain integer variables, enabling an unchecked/unsanitized input path that can be reflected to users. Public referenc...

CVE-2005-0104

Cross-site scripting XSS vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables...

CVE-2003-0104

CVE-2003-0104 : Affected software are PeopleTools 8.10–8.18, 8.40, and 8.41. The issue is a directory traversal in the SchedulerTransfer servlet that allows remote attackers to overwrite arbitrary files. The connected documents confirm the vulnerable component and the impact, but do not provide e...

CVE-2003-0104

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet...

Mandrake Linux Security Advisory : metamail (MDKSA-2004:014)

Two format string and two buffer overflow vulnerabilities were discovered in metamail by Ulf Harnhammar. The updated packages are patched to fix these holes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...

CVE-2004-0104

Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code...

CVE-2004-0104

CVE-2004-0104 concerns multiple format string vulnerabilities in Metamail 2.7 and earlier. The connected advisories and OpenVAS entries confirm the flaws reside in the Metamail/MIME handling code and headers, enabling remote attackers to execute arbitrary code with the privileges of the user runn...

CVE-2003-0104

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet...

CVE-2002-0104

AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD CWD tilde command, which causes a core dump...

CVE-2002-0104

CVE-2002-0104 affects AFTPD 5.4.4. A remote attacker can trigger a CD (CWD) ~ (tilde) command that causes a core dump, which may lead to partial disclosure of sensitive information. The connected documents do not provide a published fix or remediation details.

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key...

CVE-2001-0104

MDaemon Pro 3.5.1 and earlier have a local privilege bypass: a user can bypass the "lock server" security setting by pressing Cancel at the password prompt and then pressing Enter. The available documents confirm the affected product and UI-based trigger, but do not provide concrete mitigation st...