140 matches found
CVE-2007-0150
CVE-2007-0150 affects Dayfox Blog’s index.php, with multiple PHP remote file inclusion vulnerabilities exploitable via user-supplied URL parameters (page, subject, q). The vulnerability stems from unsafely including remote content based on these parameters, allowing an attacker to execute arbitra...
[SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 952-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23rd, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 952-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23rd, 2006 http://www.debian.org/security/faq -...
auth_ldap security update
CentOS Errata and Security Advisory CESA-2006:0179-01 An updated authldap packages that fixes a format string security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The authldap package...
RHEL 2.1 : auth_ldap (RHSA-2006:0179)
An updated authldap packages that fixes a format string security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The authldap package is an httpd module that allows user authentication...
Critical: Red Hat Security Advisory: auth_ldap security update
An updated authldap packages that fixes a format string security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The authldap package is an httpd module that allows user authentication...
CVE-2006-0150
CVE-2006-0150 is a format-string vulnerability in the Apache auth_ldap module (auth_ldap) caused by improper handling in the logging function. The issue exists in libapache-auth-ldap and affects Apache auth_ldap 1.6.0 and earlier, enabling remote attackers to execute arbitrary code with the httpd...
MySQL < 3.23.56 'mysqld' Privilege Escalation Vulnerability
MySQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2005 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...
CVE-2005-0150
Firefox before 1.0 allows the user to store a 1 javascript: or 2 data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code...
CVE-2005-0150
CVE-2005-0150 affects Mozilla Firefox versions prior to 1.0. The bug allows storing javascript: or data: Livefeed bookmarks that are later executed in the context of the current page, enabling remote attackers to potentially run arbitrary code. Public descriptions consistently state Firefox pre-1...
CVE-2004-0150
The CVE-2004-0150 entry concerns Python 2.2.0–2.2.1 where a buffer overflow in getaddrinfo (with IPv6 support disabled) can permit remote code execution via a DNS-obtained IPv6 address. Affected component: Python's getaddrinfo routine; root cause is improper handling of DNS IPv6 addresses leading...
Mandrake Linux Security Advisory : MySQL (MDKSA-2003:057)
In MySQL 3.23.55 and earlier, MySQL would create world-writeable files and allow mysql users to gain root privileges by using the 'SELECT INTO OUTFILE' operator to overwrite a configuration file, which could cause mysql to run as root upon restarting the daemon. This has been fixed upstream in...
CVE-2003-0150
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf...
CVE-2003-0150
MySQL
MySQL datadir/my.cnf Modification Privilege Escalation
The remote version of MySQL is older than 3.23.56. Such versions are affected by an issue that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a 'DATADIR/my.cnf' that includes the line 'user=root' under the 'mysqld' option...
CVE-2001-0150
Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix SFU 2.0, which creates session...
CVE-2000-0150
Check Point FireWall-1 is affected by CVE-2000-0150, where the FTP PASV handling flaw in stateful inspection allows remote attackers to bypass FTP data-connection restrictions by causing the firewall to misinterpret crafted packets as a valid PASV response. The vulnerability stems from layering v...
CVE-2000-0150
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt...
CVE-1999-0150
The CVE-1999-0150 issue concerns the Perl fingerd service. Connected sources specify that the vulnerability allows arbitrary command execution from remote users and affects the finger package. Multiple entries indicate affected versions are those prior to 0.17-4, with a patched version 0.17-4 ava...