FreeBSD Ports: postgresql, postgresql-server, ja-postgresql

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 311-1 (kernel)

The remote host is missing an update to kernel announced via advisory DSA 311-1. OpenVAS Vulnerability Test $Id: deb3111.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 311-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 332-1 (kernel-source-2.4.17, kernel-patch-2.4.17-mips)

The remote host is missing an update to kernel-source-2.4.17, kernel-patch-2.4.17-mips announced via advisory DSA 332-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2007-0246

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATHINFO...

CVE-2007-0246

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATHINFO...

CVE-2007-0246

CVE-2007-0246 affects GForge’s CVSWeb CGI (plugins/scmcvs/www/cvsweb.php) running with CVSWeb in GForge 4.5.16 prior to 20070524. The vulnerability arises from insufficient sanitization of PATH_INFO, allowing remote attackers to inject shell metacharacters and execute arbitrary commands. Reported...

CVE-2007-0246

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATHINFO...

[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1297-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24th, 2007 http://www.debian.org/security/faq -...

RHEL 4 : postgresql (RHSA-2005:138)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:138 advisory. A flaw in the LOAD command in PostgreSQL was discovered. A local user could use this flaw to load arbitrary shared libraries and therefore...

CVE-2005-0246

CVE-2005-0246 affects the PostgreSQL intagg contrib module in version 8.0.0 and earlier. The vulnerability allows a denial of service (crash) when processing crafted arrays. The initial description provides the impact and affected component; connected advisories mention PostgreSQL security update...

CVE-2005-0246

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service crash via crafted arrays...

Vulnerability in contrib module (CVE-2005-0246)

The intagg contrib module allows attackers to cause a denial of service. A valid login is required to exploit this vulnerability...

CVE-2004-0246

CVE-2004-0246 describes multiple PHP remote file inclusion vulnerabilities in Les Commentaires 2.0, specifically in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php. The underlying issue is remote code execution via the rep parameter, allowing an attacker to influence inclu...

CVE-2003-0246

...

CVE-2003-0246

CVE-2003-0246 affects the Linux kernel (2.4.x) where the ioperm system call does not properly restrict privileges, enabling a local user to gain read and/or write access to certain I/O ports on 2.4.20 and earlier. The connected OpenVAS and advisory records reference Debian and other vendor adviso...

CVE-2002-0246

The CVE-2002-0246 issue affects UnixWare 7.1.1, where a format string vulnerability in the message catalog library functions can be exploited locally by manipulating the LC_MESSAGE environment variable. This could allow a local attacker to read other message catalogs containing format strings fro...

MS00-019: Microsoft IIS ISAPI Virtual Directory UNC Mapping ASP Source Disclosure (uncredentialed check)

It is possible to get the source code of the remote ASP scripts which are hosted on a mapped network share by appending '%5c' to the end of the request. ASP source code usually contains sensitive information such as logins and passwords. %NASLMINLEVEL 70300 [email protected] http://libpcap.net See...

CVE-2002-0246

Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LCMESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint...

CVE-2001-0246

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain...

CVE-2001-0246

CVE-2001-0246 affects Internet Explorer 5.5 and earlier. The vulnerability arises from improper verification of the domain of a frame within a browser window, enabling remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different...