About the security content of Security Update 2009-002 / Mac OS X v10.5.7

About the security content of Security Update 2009-002 / Mac OS X v10.5.7 Last Modified: May 12, 2009 Article: HT3549 Summary This document describes the security content of Security Update 2009-002 / Mac OS X v10.5.7, which can be downloaded and installed via Software Update preferences, or from...

CVE-2009-0154

CVE-2009-0154 is a heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X 10.4.11 and 10.5 prior to 10.5.7, triggered by parsing a crafted Compact Font Format (CFF) font. Remote code execution is possible via a malicious font, as described by ZDI and the Apple Security Update notes. ...

Fedora Core 8 FEDORA-2009-0154 (xterm)

The remote host is missing an update to xterm announced via advisory FEDORA-2009-0154. OpenVAS Vulnerability Test $Id: fcore20090154.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0154 xterm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

FreeBSD Ports: newsgrab

The remote host is missing an update to the system as announced in the referenced advisory. VID cd7e260a-6bff-11d9-a5df-00065be4b5b6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: newsgrab

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0154 Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Debian Security Advisory DSA 265-1 (bonsai)

The remote host is missing an update to bonsai announced via advisory DSA 265-1. OpenVAS Vulnerability Test $Id: deb2651.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 265-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0154

CVE-2008-0154 is a SQL injection vulnerability in EvilBoard 0.1a (Alpha), exploitable via the c parameter in index.php. The NVD description confirms arbitrary SQL execution by remote attackers, with a BASE SCORE 7.5 (HIGH) and network access as the attack vector. Public references indicate availa...

CVE-2007-0154

CVE-2007-0154 affects Webulas, where sensitive data is stored under the web root with insufficient access control. The issue allows remote attackers to directly request db/db.mdb and download a database containing passwords. The connected sources (NVD/NVD-derived entries) confirm the vulnerabilit...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

CVE-2006-0154

The CVE-2006-0154 issue affects the 427BB software (versions 2.2 and 2.2.1) in the showthread.php component, where the ForumID parameter causes a SQL injection vulnerability. The root cause is an unvalidated input path in the showthread.php handler, allowing remote attackers to execute arbitrary ...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

DEBIAN-CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

CVE-2004-0154 affects nfs-utils rpc.mountd versions after 1.0.3 and before 1.0.6. The issue allows a denial of service (crash) when performing an NFS mount from a client whose reverse DNS lookup name does not match the forward lookup. Documented in multiple sources (Red Hat RHSA-2004:072, SUSE CV...

CVE-2003-0154

CVE-2003-0154 affects the Bonsai Mozilla CVS query tool (CGI suite) used to browse CVS repositories. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via multiple parameters: cvslog.cgi (file, root, rev), cvsblame.cgi (file, root), cvsquery.cgi (various), showcheckins....

CVE-2002-0154

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments...

CVE-2002-0154

Microsoft SQL Server 7.0 and SQL Server 2000 contain buffer overflow vulnerabilities in multiple extended stored procedures. A remote attacker could exploit these to cause a denial of service or execute arbitrary code (potentially with the SQL Server service account privileges), and could even af...