CVE-2008-0310

Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST...

CVE-2008-0310

CVE-2008-0310 describes a local privilege escalation in SCO UnixWare 7.1.4 before patch p534589. The vulnerability lies in the pkgadd command, which improperly handles an environment variable (likely PKGINST) during package installation, allowing a local user to traverse directories using ".." se...

CVE-2008-0310

Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST...

iDefense Security Advisory 04.03.08: SCO UnixWare pkgadd Directory Traversal Vulnerability

iDefense Security Advisory 04.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2008 I. BACKGROUND SCO UnixWare is a UNIX operating system that runs on many OEM platforms. The pkgadd command is used to install packages on the system. More information about the product is...

CVE-2008-0310

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5355...

CVE-2006-0310

Cross-site scripting XSS vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag...

CVE-2006-0310

Cross-site scripting XSS vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag...

CVE-2006-0310

The CVE-2006-0310 vulnerability affects aoblogger 2.3. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag. The root cause is improper handling of the BBcode url tag in aoblogger 2.3, enabling script execut...

CVE-2005-0310

Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to 1 search.info.php, 2 permissions.info.php, 3 security.info.php, 4 formcontrol.php, or 5 filemodules.php, which reveals the path in an error message because the pathoscoreversion variable is undefine...

CVE-2005-0310

CVE-2005-0310 affects Exponent CMS. The vulnerability is a path disclosure caused by an undefined pathos_core_version variable, leading to leakage of installation paths via direct HTTP requests to /search.info.php, /permissions.info.php, /security.info.php, /formcontrol.php, and /file_modules.php...

CVE-2003-0310

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

eZ Publish articleview.php XSS

The remote host is using ezPublish, a content management system. There is a flaw in the remote ezPublish which lets an attacker perform a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0310

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

CVE-2003-0310

CVE-2003-0310 affects the eZ Publish web content system, specifically versions

CVE-2002-0310

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations 1 testweb/newstest, 2 alwn3845/imaptest, 3 alwi3845/wtest3452, or 4...

CVE-2002-0310

CVE-2002-0310 affects Netwin WebNews 1.1k CGI. The issue arises from default usernames and cleartext passwords that cannot be deleted by the administrator, enabling remote attackers to gain privileges using the listed credential pairs (testweb/newstest, alwn3845/imaptest, alwi3845/wtest3452, test...

CVE-2001-0310

sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle when the temporary file already exists, which causes sort to crash and possibly impacts security-sensitive scripts...

CVE-2000-0310

IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets...

CVE-2000-0310

OpenBSD 2.4 is affected by CVE-2000-0310 through the IP fragment assembly mechanism. The vulnerability can allow a remote attacker to cause a denial of service by sending a large number of fragmented packets, affecting availability. The provided documents describe the issue but do not offer a rem...

CVE-2001-0310

The issue is with the UNIX sort utility on FreeBSD 4.1.1 and earlier, where temporary files are created with predictable names and not properly handled when the file already exists. This can cause sort to crash, effectively denying service to scripts or administration tasks that rely on sort. Pub...