openSUSE 10 Security Update : libnasl (libnasl-5943)

This update of libnasl adds missing return value checks for openssl function calls. CVE-2009-0125 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libnasl-5943. The text description of this...

CVE-2009-0125

NOTE: this issue has been disputed by the upstream vendor. nasl/naslcrypto2.c in the Nessus Attack Scripting Language library aka libnasl 2.2.11 does not properly check the return value from the OpenSSL DSAdoverify function, which allows remote attackers to bypass validation of the certificate...

CVE-2009-0125

Technical details for CVE-2009-0125 are not publicly available in the provided documents. Monitor for updates from upstream and security advisories.

CVE-2008-0125

CVE-2008-0125 describes a cross-site scripting (XSS) vulnerability in phpstats.php of Michael Wagner’s phpstats 0.1 alpha, exploitable via the baseDir parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Public sources consistently identify phpstats 0.1_alpha as th...

phpstats0.1-xss.txt

Online at: http://int21.de/cve/CVE-2008-0125-phpstats.html Cross Site Scripting XSS in phpstats 0.1alpha, CVE-2008-0125 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0125 http://www.michael-wagner.de/software/phpstats/ Description phpstats is a tool creating statistic...

CVE-2007-0125

Kaspersky Antivirus Engine 6.0 for Windows and 5.5-10 for Linux are affected by a denial-of-service in the PE file handling path. The root cause is an infinite loop triggered when parsing an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a Portable Executable (PE) file. An at...

CVE-2006-0125

Affected software: AppServ 2.4.5 (AppServ main.php). Vulnerability: appserv_root parameter in appserv/main.php can be exploited for a remote file inclusion (RFI). Root cause: lack of input sanitization for appserv_root leading to include of arbitrary files. Impact (as documented): unauthenticated...

CVE-2005-0125

Summary: CVE-2005-0125 affects Mac OS X 10.3.7 and earlier. The at family (at, atrm, batch, atq, atrun) did not properly drop privileges, enabling a local user to delete files, execute commands, or read files via crafted job files. This is a local privilege escalation with potential to access or ...

CVE-2005-0125

The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to 1 delete arbitrary files via atrm, 2 execute arbitrary programs via the -f argument to batch, or 3 read arbitrary files via the -f argument to batch, which generates a job file that is...

CVE-2003-0125

CVE-2003-0125 describes a buffer overflow in the web interface of the SOHO Routefinder 550 prior to firmware 4.63. The issue allows remote attackers to trigger a reboot and potentially execute arbitrary code via a long GET /OPTIONS value. OpenVAS-based findings corroborate a related “too long URL...

CVE-2004-0125

The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table...

FreeBSD : SA-04:12.jailroute

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to modify the host routing tables of the whole system. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription scriptid12555;...

CVE-2004-0125

The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table...

CVE-2004-0125

The CVE-2004-0125 issue affects the FreeBSD jail subsystem (jail(2)) in FreeBSD 4. x prior to 4.10-RELEASE. A programming error failed to verify that routing-table manipulation originated from a jailed process, allowing a privileged jailed process to modify the host’s routing tables. This could c...

CVE-2003-0125

Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service reboot and execute arbitrary code via a long GET /OPTIONS value...

CVE-2002-0125

CVE-2002-0125 concerns a buffer overflow in ClanLib library 0.5 that can allow local users to execute arbitrary code in games using the library (e.g., Super Methane Brothers, Star War, Kwirk, Clankanoid) via a long HOME environment variable. Affected: ClanLib 0.5 in games; root cause: unchecked l...

CVE-2001-0125

CVE-2001-0125 affects exmh 2.2 and earlier, where insecure handling of temporary files in /tmp (e.g., exmhErrorMsg) allows local users to overwrite files via a symlink attack. Connected advisories confirm the issue and note that newer versions (e.g., exmh 2.3.1+) fix the vulnerability by switchin...

CVE-2000-0125

CVE-2000-0125 concerns wwwthreads where numeric data and table names passed to SQL queries are not properly sanitized. The underlying cause is improper input handling in SQL construction, enabling an unauthenticated, remote attacker to gain privileges on the wwwthreads forums. The available recor...

CVE-1999-0125

Buffer overflow in SGI IRIX mailx program...

CVE-1999-0125

CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...