145 matches found
FreeBSD : Buffer overflows and format string bugs in Emil (ce46b93a-80f2-11d8-9645-0020ed76ef5a)
Ulf Harnhammar reports multiple buffer overflows in Emil, some of which are triggered during the parsing of attachment filenames. In addition, some format string bugs are present in the error reporting code. Depending upon local configuration, these vulnerabilities may be exploited using speciall...
FreeBSD Ports: emil
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: emil
The remote host is missing an update to the system as announced in the referenced advisory. VID ce46b93a-80f2-11d8-9645-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: newsgrab
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CentOS 3 / 4 : cups (CESA-2008:0153)
Updated cups packages that fixes two security issues and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...
Debian Security Advisory DSA 265-1 (bonsai)
The remote host is missing an update to bonsai announced via advisory DSA 265-1. OpenVAS Vulnerability Test $Id: deb2651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 265-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2008-0153
CVE-2008-0153 affects Pragma TelnetServer 7.0.4.589, where telnetd.exe is vulnerable to a remote DoS via a crafted TELOPT PRAGMA LOGON option that triggers a NULL pointer dereference. The vulnerability allows an attacker to cause a process crash and resource exhaustion without requiring authentic...
rPSA-2007-0153-1 qt-x11-free
rPath Security Advisory: 2007-0153-1 Published: 2007-08-01 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: qt-x11-free=/conary.rpath.com@rpl:devel//1/3.3.4-5.9-1 References: https://vulners.com/cve/CVE-2007-338...
RHEL 5 : php (RHSA-2007:0153)
Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A...
CVE-2007-0153
AJLogin 3.5 stores the database (ajlogin.mdb) under the web root with insufficient access control, enabling remote download of passwords. Affected component: ajlogin.mdb handling; root cause: improper access restrictions. Impact: partial confidentiality loss (passwords exposed). Exploitation deta...
CVE-2006-0153
CVE-2006-0153 affects 427BB Fourtwosevenbb (versions 2.2 and 2.2.1) where authentication credentials are verified using username, authenticated, and usertype cookies. The vulnerability allows remote attackers to bypass authentication by crafting a valid username and usertype and setting the authe...
CVE-2006-0153
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie...
CVE-2005-0153: newsgrab file names directory traversal
CVE-2005-0153 affects Newsgrab on UNIX. Versions prior to 0.5.0pre4 allow a remote attacker to perform a directory-traversal via crafted file names (containing ..), enabling overwriting arbitrary files on the system with the user’s privileges. The issue stems from improper validation of user-supp...
CVE-2004-0153
Summary (CVE-2004-0153): Multiple format string vulnerabilities affect Emil up to version 2.1.0 and earlier. The flaws reside in error-message handling and can allow an attacker to execute arbitrary code on a vulnerable host when processing crafted messages. Public documentation across sources (N...
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by 1 cvslog.cgi, 2 cvsview2.cgi, or 3 multidiff.cgi...
CVE-2003-0153
CVE-2003-0153 affects the bonsai Mozilla CVS query tool. The vulnerability is an absolute path disclosure exposed in error messages generated by cvslog.cgi, cvsview2.cgi, and multidiff.cgi. Connected records confirm Debian advisory DSA-265-1 documents the issue and notes a missing update; OpenVAS...
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by 1 cvslog.cgi, 2 cvsview2.cgi, or 3 multidiff.cgi...
CVE-2002-0153
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability...
CVE-2002-0153
CVE-2002-0153 affects Internet Explorer 5.1 for Macintosh. A vulnerability allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element (the “Local Applescript Invocation” issue). The connected documents describe the flaw and its alias, but do not...
CVE-2002-0153
Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability...