187 matches found
CVE-2008-0195
WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages...
CVE-2008-0195
WordPress 2.0.11 and earlier is affected by an information disclosure vulnerability: remote attackers can obtain sensitive information by passing an empty value to the page parameter in certain wp-admin PHP scripts, which reveals the path in error messages. Affected component: WordPress core (wp-...
CVE-2007-0195
CVE-2007-0195 affects F5 FirePass 5.4ā5.5.1 and 6.0. The issue is that authentication error messages differ between valid and invalid usernames, enabling remote attackers to confirm the existence of LDAP accounts. The connected documents confirm the affected product/versions and the exploitation ...
Debian DSA-988-1 : squirrelmail - several vulnerabilities
Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0188 Martijn Brinkers and Ben Maurer found a flaw in webmail.php that allows remote attackers to inject...
CentOS 3 / 4 : squirrelmail (CESA-2006:0283)
An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...
RHEL 3 / 4 : squirrelmail (RHSA-2006:0283)
An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...
squirrelmail security update
CentOS Errata and Security Advisory CESA-2006:0283 An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update h...
Moderate: Red Hat Security Advisory: squirrelmail security update
An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...
SquirrelMail: Cross-site scripting and IMAP command injection
Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott Hughes...
[SECURITY] [DSA 988-1] New squirrelmail packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 988-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 8th, 2006 http://www.debian.org/security/faq -...
DSA-988-1 squirrelmail - several
Bulletin has no description...
CVE-2006-0195
CVE-2006-0195 affects SquirrelMail 1.4.0ā1.4.5 and is caused by an interpretation conflict in the MagicHTML filter, enabling remote XSS via style sheet specifiers with invalid /* */ comments or a newline in the url specifier. Public advisories and OpenVAS entries reference related fixes; Debian/C...
CVE-2005-0195
Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service device restart via a crafted IPv6 packet...
CVE-2005-0195
Cisco IOS 12.0Sā12.3YH is vulnerable to a DoS: remote attackers can cause a device restart by sending crafted IPv6 packets. Exploitation targets IPv6 processing (requires IPv6 enabled) and may involve multiple crafted packets to trigger a reload. Affected product: Cisco IOS; root cause relates to...
Debian DSA-015-1 : sash - broken maintainer script
Versions of the sash package prior to 3.4-4 did not clone /etc/shadow properly, causing it to be made world-readable. This package only exists in stable, so if you are running unstable you won't see a bugfix unless you use the resources from the bottom of this message to the proper configuration...
Debian DSA-317-1 : cupsys - denial of service
The CUPS print server in Debian is vulnerable to a denial of service when an HTTP request is received without being properly terminated. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-317...
CVE-2003-0195
CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port 631, which does not time out...
CVE-2003-0195
CVE-2003-0195 affects the CUPS print server prior to version 1.1.19. The vulnerability allows remote denial of service via a partial HTTP printing request to the IPP port (631) that does not time out, blocking further printing requests. The issue is triggered by careful crafting of a connection t...
