CVE-2007-0372

CVE-2007-0372 involves multiple SQL injection flaws in PHP-Nuke 7.9. The vulnerabilities allow remote attackers to execute arbitrary SQL commands through parameters in admin/modules/modules.php (active) and modules/Advertising/admin/index.php (ad_class, imageurl, clickurl, ad_code, position), plu...

CentOS 3 / 4 : gftp (CESA-2005:410)

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

CVE-2006-0372

The CVE-2006-0372 entry concerns multiple SQL injection vulnerabilities in config.php of Insane Visions BlogPHP (likely version 1.0). The flaw allows remote attackers to inject arbitrary SQL via the blogphp_username or blogphp_password values stored in a cookie, enabling manipulation of the datab...

Fedora Core 3 : gftp-2.0.18-0.FC3 (2005-309)

Fri Feb 18 2005 Warren Togami 2.0.18-0.FC3 - FC3 including CVE-2005-0372 - Thu Feb 10 2005 Warren Togami 2.0.18-1 - 2.0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Moderate: Red Hat Security Advisory: gftp security update

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

RHEL 4 : gftp (RHSA-2005:410)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:410 advisory. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user can be tricked into downloading a...

Fedora Core 2 : gftp-2.0.18-0.FC2 (2005-310)

Fri Feb 18 2005 Warren Togami 2.0.18-0.FC2 - FC2 including CVE-2005-0372 - Thu Feb 10 2005 Warren Togami 2.0.18-1 - 2.0.18 - Tue Jun 15 2004 Elliot Lee - rebuilt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

CVE-2005-0372

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...

CVE-2005-0372

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...

CVE-2005-0372

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0372

CVE-2004-0372 affects xine and related components (xine-bugreport, xine-check) where a local user can cause overwriting of arbitrary files via a symlink attack on the bug report email generated by those scripts. The vulnerability arises from insecure handling of temporary/bug report files, enabli...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2003-0372

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service core dump and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script...

CVE-2003-0374

CVE-2003-0374 describes multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, separate from CVE-2003-0372/0373. The connected records provide concrete details for 0372 (signed integer vulnerability in libnasl allowing local privilege escalation and possible c...

CVE-2003-0372

CVE-2003-0372 affects Nessus prior to 2.0.6, specifically the libnasl component. The root cause is a signed integer handling issue that allows a local user with plugin upload privileges to trigger a denial of service (core dump) and potentially execute arbitrary code by providing a negative argum...

CVE-2003-0372

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service core dump and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script...

CVE-2002-0372

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's IE security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path...

CVE-2002-0372

CVE-2002-0372 affects Windows Media Player 6.4, 7.1 and Media Player for Windows XP. A remote attacker could bypass Internet Explorer security and execute code by delivering a specially crafted .wma file with a license installation stored in the IE cache (Cache Path Disclosure via Windows Media P...