Fedora Core 9 FEDORA-2009-0297 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory FEDORA-2009-0297. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Gentoo Security Advisory GLSA 200404-13 (cvs)

The remote host is missing updates announced in advisory GLSA 200404-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Security Advisory (FreeBSD-SA-04:07.cvs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:07.cvs.asc ADV FreeBSD-SA-04:07.cvs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-04:07.cvs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:07.cvs.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Ports: cvs+ipv6

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CentOS 4 : krb5 (CESA-2008:0180)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...

CVE-2008-0180

The CVE-2008-0180 issue affects Liferay Portal 4.3.6, where the User Profile Greeting in themes/_unstyled/templates/init.vm is not properly sanitized, allowing an authenticated user to inject script/HTML (XSS). The Red Hat/ CERT and CVE records corroborate a stored XSS risk via the Greeting field...

Liferay Portal User Profile Greeting stored XSS

Overview Liferay Portal fails to properly validate the User Profile "Greeting" value, which can allow script to execute when a user logs into the portal. Description Liferay Portal is an enterprise portal solution that uses Java technologies. The User Profile "Greeting" value of Liferay Portal...

Debian Security Advisory DSA 486-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 486-1. OpenVAS Vulnerability Test $Id: deb4861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 486-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 486-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 486-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0180

CVE-2007-0180 affects EF Commander 5.75, where a stack-based buffer overflow occurs when processing an ISO file containing a deeply nested filename, enabling user-assisted arbitrary code execution. The vulnerability stems from handling a large filename in crafted ISO content. Impact is arbitrary ...

KLA10143 ACE vulnerability in EF Commander

A buffer overflow was found in EF Commander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO or user assistance. Original advisories - Related products EF-Commander CVE list CVE-2007-0180 high...

CVE-2006-0180

CaLogic Calendars 1.2.2 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via the Title field on the "Adding New Event" page, and possibly other vectors involving iframe tags. The affected component is the calendar input handling in C...

CVE-2005-0180

CVE-2005-0180 involves multiple signedness errors in sg_scsi_ioctl (scsi_ioctl.c) of Linux 2.6.x. The flaw lets a local user read or modify kernel memory by passing negative integers to the ioctl, bypassing a maximum-length check before copy_from_user/copy_to_user. Connected advisories (e.g., Man...

CVE-2005-0180

Multiple integer signedness errors in the sgscsiioctl function in scsiioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copyfromuser and copytouser functions...

Mandrake Linux Security Advisory : cvs (MDKSA-2004:028)

Sebastian Krahmer from the SUSE security team discovered a remotely exploitable vulnerability in the CVS client. When doing a cvs checkout or update over a network, the client accepts absolute pathnames in the RCS diff files. A maliciously configured server could then create any file with content...

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 486-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...