131 matches found
Immunity Canvas: NETWORKMANAGERUNSECRET
Name| NetworkManagerUnSecret ---|--- CVE| CVE-2009-0365 Exploit Pack| CANVAS Description| NetworkManager: GetSecrets disclosure Notes| CVE Name: CVE-2009-0365 VENDOR: Linux Notes: This allows you to get secrets about wireless network connections from the NetworkManager 0.6.x and 0.7.x for...
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
CVE-2009-0365
The CVE-2009-0365 entry concerns nm-applet.conf in GNOME NetworkManager prior to 0.7.0.99, where an incorrect deny setting allows local users to disclose sensitive data via the GetSecrets DBus handler (network connection passwords and pre-shared keys). The connected sources confirm this is an inf...
[USN-727-1] network-manager-applet vulnerabilities
=========================================================== Ubuntu Security Notice USN-727-1 March 03, 2009 network-manager-applet vulnerabilities CVE-2009-0365, CVE-2009-0578 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...
Gentoo Security Advisory GLSA 200503-14 (dcopidlng)
The remote host is missing updates announced in advisory GLSA 200503-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: kdelibs, ja-kdelibs
The remote host is missing an update to the system as announced in the referenced advisory. VID 29dd0065-81fa-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: kdelibs, ja-kdelibs
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: ethereal, tethereal
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-0365
CVE-2008-0365 affects CORE FORCE up to version 0.95.172. It involves multiple buffer overflows in the Firewall module (IOCTL) and Registry module (SSDT hook handler) that allow a local user to crash the system and potentially execute code in kernel context. The provided documents do not specify a...
CVE-2007-0365
CVE-2007-0365 affects All In One Control Panel (AIOCP) and is tied to multiple XSS flaws in versions 1.3.009 and earlier. The vulnerability summary lists specific injectable vectors: parameters (1) topid, (2) forid, (3) catid to code/cp_forum_view.php; (4) choosed_language to cp_dpage.php; (5) or...
CVE-2006-0365
CVE-2006-0365 concerns a Cross-site Scripting (XSS) vulnerability in XMB (extreme message board). The issue enables remote attackers to inject arbitrary web script or HTML by supplying JavaScript in the SRC attribute of an IMG element. Documents do not provide specific vulnerable versions, exploi...
Fedora Core 3 : kdelibs-3.3.1-2.9.FC3 (2005-245)
Wed Mar 23 2005 Than Ngo 6:3.3.1-2.9.FC3 - Applied patch to fix konqueror international domain name spoofing, CVE-2005-0237, 147405 - get rid of broken AltiVec instructions on ppc - Wed Mar 2 2005 Than Ngo 6:3.3.1-2.8.FC3 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150092 thanks KDE security...
Fedora Core 2 : kdelibs-3.2.2-14.FC2 (2005-244)
Wed Mar 2 2005 Than Ngo 6:3.2.2-14.FC2 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150090 thanks KDE security team - Wed Feb 16 2005 Than Ngo 3.2.2-13.FC2 - Applied patch to fix dcopidlng insecure temporary file usage, CVE-2005-0365, 148823 Note that Tenable Network Security has extracted the...
CVE-2005-0365
The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
RHEL 4 : kdelibs (RHSA-2005:325)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:325 advisory. The kdelibs package provides libraries for the K Desktop Environment. The International Domain Name IDN support in the Konqueror browser...
CVE-2005-0365
The CVE-2005-0365 issue affects KDE’s dcopidlng component in KDE 3.2.x and 3.3.x, where temporary files are created with predictable filenames, enabling local users to overwrite arbitrary files via a symlink attack. Connected documents confirm insecure temporary-file usage in dcopidlng and refere...