FreeBSD Ports: xboing

The remote host is missing an update to the system as announced in the referenced advisory. VID e25566d5-6d3f-11d8-83a4-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0149

Affected software: TUTOS 1.3. The CVE-2008-0149 entry describes a remote information disclosure vulnerability where an attacker can read system information by directly requesting php/admin/phpinfo.php, which invokes phpinfo(). The issue is categorized as a PHP information-disclosure via HTTP. Con...

CVE-2007-0149

CVE-2007-0149 affects EMembersPro 1.0. The vulnerability is due to insufficient access control: the application stores sensitive information under the web root, allowing remote attackers to directly request users.mdb and obtain a database containing passwords. This can lead to partial disclosure ...

CVE-2006-0149

CVE-2006-0149 describes an XSS vulnerability in SimpBook 1.0 when html_enable is on (default). The flaw allows remote attackers to inject arbitrary script/HTML via the message field. Affected component is the message handling; root cause is lack of input sanitization leading to reflected/Stored X...

RHEL 4 : mozilla (RHSA-2005:335)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:335 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A buffer overflow bug was found...

RHEL 4 : thunderbird (RHSA-2005:094)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:094 advisory. Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird handled synthetic middle click events. It is...

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2005-0149

CVE-2005-0149 affects Thunderbird 0.6–0.9 and Mozilla 1.7–1.7.3: cookies in mail messages are not blocked by the network.cookie.disableCookieForMailNews preference, allowing a remote attacker to bypass the user’s cookie policy via HTTP content in emails. Connected advisories confirm multiple vend...

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2004-0149

CVE-2004-0149 affects the game xboing prior to version 2.4. Multiple buffer overflows enable a local attacker to gain privileges (reported as able to drop a shell with gid 'games' due to improper bounds checking and unsafe environment-variable use in highscore.c). The issue is confirmed across mu...

CVE-2003-0149

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...

CVE-2003-0149

CVE-2003-0149: ePolicy Orchestrator (McAfee) with Agent 2.0/2.5/2.5.1 is affected by a Heap Overflow in the Agent. A remote attacker can trigger arbitrary code execution by sending a POST request with long parameters to the Agent. The issue is documented alongside other ePO vulnerabilities; a ven...

CVE-2003-0149

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters...

CVE-2002-0149

CVE-2002-0149 concerns a buffer overflow in the IIS ASP Server-Side Include (SSI) processing when handling long file names. The issue affects Microsoft IIS 4.0, 5.0 and 5.1, and can allow a remote attacker to crash the server or potentially execute arbitrary code via crafted SSI inputs. Multiple ...

CVE-2001-0149

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object...

CVE-2001-0149

CVE-2001-0149 affects Windows Scripting Host in Internet Explorer 5.5 and earlier. The vulnerability allows remote attackers to read arbitrary files through the GetObject JavaScript function and the htmlfile ActiveX object. Affected product: Internet Explorer on Windows (older IE versions). Root ...

CVE-2001-0149

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object...

CVE-2000-0149

Zeus Web Server (versions 3.1.x–3.3.5) contains an information disclosure flaw where a null byte (%00) at the end of a URL allows remote attackers to view the source code of CGI scripts. Root cause: improper handling of CGI input leading to source disclosure. Impact is information exposure of CGI...

CVE-2021-0149

CVE-2021-0149 is rejected/not used and does not represent an active vulnerability entry.