194 matches found
Fedora Update for puppet FEDORA-2010-1079
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-0156
CVE-2010-0156 : Puppet 0.24.x up to 0.24.9 and 0.25.x up to 0.25.2 is vulnerable to a local symlink attack that lets unprivileged users overwrite arbitrary files via temporary files: /tmp/daemonout, /tmp/puppetdoc.txt, /tmp/puppetdoc.tex, or /tmp/puppetdoc. Root cause: insecure handling of tempor...
SLES9: Security update for Perl
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013510 within the SuSE...
SLES9: Security update for Perl
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013510 within the SuSE...
CVE-2009-0156
CVE-2009-0156 : In Apple Mac OS X, Launch Services on 10.4.11 and 10.5 (before 10.5.7) allows remote attackers to cause a denial of service by feeding a crafted Mach-O executable that triggers an out-of-bounds memory read. The issue manifests as a persistent Finder crash (repeated termination/rel...
Gentoo Security Advisory GLSA 200404-18 (ssmtp)
The remote host is missing updates announced in advisory GLSA 200404-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200502-13 (Perl)
The remote host is missing updates announced in advisory GLSA 200502-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: perl
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: perl
The remote host is missing an update to the system as announced in the referenced advisory. VID a5eb760a-753c-11d9-a36f-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian Security Advisory DSA 485-1 (ssmtp)
The remote host is missing an update to ssmtp announced via advisory DSA 485-1. OpenVAS Vulnerability Test $Id: deb4851.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 485-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2008-0156
CVE-2008-0156: Absolute path traversal in Million Dollar Script 2.0.14 (index.php) lets remote attackers read arbitrary files via encoded '/' sequences in the link parameter. Affected: Million Dollar Script 2.0.14; root cause: improper handling of encoded path separators. Impact: read access to a...
CVE-2007-0156
The CVE-2007-0156 entry concerns M-Core where the application stores its database under the web document root, enabling information disclosure if an attacker directly requests db/uyelik.mdb. Affected component: the database file accessed via the web root; root cause: improper placement of the dat...
CVE-2006-0156
CVE-2006-0156 is a cross-site scripting vulnerability in Foxrum 4.0.4f that allows remote attackers to inject arbitrary Javascript via the javascript: URI used in bbcode url tags in the files addpost1.php and addtopic1.php . The issue is triggered by crafting URLs in bbcode that execute JavaScrip...
FreeBSD : perl -- vulnerabilities in PERLIO_DEBUG handling (a5eb760a-753c-11d9-a36f-000a95bc6fae)
Kevin Finisterre discovered bugs in perl's I/O debug support : - The environmental variable PERLIODEBUG is honored even by the set-user-ID perl command usually named sperl or suidperl. As a result, a local attacker may be able to gain elevated privileges. CVE-2005-0155 - A buffer overflow may occ...
CVE-2005-0156
The CVE-2005-0156 issue affects Perl 5.8.0 when built with setuid support (sperl). The vulnerability is a buffer overflow in the PerlIO implementation that can be triggered by setting PERLIO_DEBUG and running a Perl script whose full pathname has a long directory tree. This allows local users to ...
CVE-2005-0156
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support sperl, allows local users to execute arbitrary code by setting the PERLIODEBUG variable and executing a Perl script whose full pathname contains a long directory tree...
CVE-2005-0156
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support sperl, allows local users to execute arbitrary code by setting the PERLIODEBUG variable and executing a Perl script whose full pathname contains a long directory tree...
CVE-2005-0156
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support sperl, allows local users to execute arbitrary code by setting the PERLIODEBUG variable and executing a Perl script whose full pathname contains a long directory tree...
Debian DSA-264-1 : lxr - missing filename sanitizing
Upstream developers of lxr, a general hypertext cross-referencing tool, have been alerted of a vulnerability that allows a remote attacker to read arbitrary files on the host system as user www-data. This could disclose local files that were not meant to be shared with the public. %NASLMINLEVEL...