Mandriva Linux Security Advisory : vim (MDVSA-2009:047-1)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Vim working directory CVE-2009-0316. This update...

Mandrake Security Advisory MDVSA-2009:047-1 (vim)

The remote host is missing an update to vim announced via advisory MDVSA-2009:047-1. OpenVAS Vulnerability Test $Id: mdksa20090471.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:047-1 vim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:047 (vim)

The remote host is missing an update to vim announced via advisory MDVSA-2009:047. OpenVAS Vulnerability Test $Id: mdksa2009047.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:047 vim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Vim PySys_SetArgv函数本地命令执行漏洞

BUGTRAQ ID: 33447 CVECAN ID: CVE-2009-0316 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的python接口使用argv0调用PySysSetArgv函数。由于Python对sys.path变量附加了空字符串，如果工作目录中的文件名匹配VIM试图导入的python模块名，就可能允许本地用户在系统中执行任意代码。 VIM Development Group VIM...

[ MDVSA-2009:047 ] vim

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:047 http://www.mandriva.com/security/ Package : vim Date : February 20, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: Python has a variable called sys.path that contains al...

CVE-2009-0316

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...

CVE-2009-0316

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...

CVE-2009-0316

CVE-2009-0316 describes an untrusted search path vulnerability in Vim’s Python interface (src/if_python.c). Vim versions before 7.2.045 are affected. The PySys_SetArgv API behavior prepends an empty string to sys.path when argv[0] lacks a path separator, enabling local users to execute arbitrary ...

CVE-2009-0316

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...

CVE-2007-0316

The CVE-2007-0316 entry describes SQL injection vulnerabilities in All In One Control Panel (AIOCP)

CVE-2006-0316

CVE-2006-0316 describes a buffer overflow in the YGPPicFinder.DLL ActiveX control used by AOL’s You’ve Got Pictures (YGP) Picture Finder Tool (bundled with AOL 8.0/8.0 Plus/9.0 Classic). The vulnerability allows a remote target to potentially execute arbitrary code via unspecified vectors, as rep...

CVE-2005-0316

WebWasher Classic 2.2.1 and 3.3 (server mode) are affected by CVE-2005-0316: the product fails to drop CONNECT requests to localhost from external hosts, enabling remote bypass of access restrictions. Affected component is WebWasher Server mode proxy handling CONNECT to 127.0.0.1. Impact is descr...

CVE-2005-0316

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...

Solaris 2.6 (x86) : 106236-13

SunOS 5.6x86: lp patch. Date this patch was last updated by Sun : Jul/17/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2004-0316

Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service crash via 1 a large GET request to port 1080 or 2 a large GET request of % characters to port 8080...

CVE-2004-0316

The CVE-2004-0316 issue affects Avirt Soho 4.3. It is a buffer overflow vulnerability that allows remote attackers to trigger a denial of service (crash) by sending a large GET request to port 1080 or a large GET request consisting of % characters to port 8080. The provided sources confirm the af...

CVE-2003-0316

Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers...

CVE-2003-0316

Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abused by spammers...

CVE-2003-0316

CVE-2003-0316 concerns Venturi Client before version 2.2, used in Fourelle and Venturi Wireless products, which can function as an open proxy/relay for various protocols, including SMTP, enabling abuse by spammers. The CVE description and NVD entry confirm the issue and its network scope; OpenVAS...

XMB < 1.9.1 Multiple XSS

The remote host is running XMB Forum, a web forum written in PHP. The version of XMB installed on the remote host is affected by several cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...