84 matches found
CVE-2007-0388
CVE-2007-0388 affects Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.x up to 2.3.6. The vulnerability is a SQL injection in the search.php handling of boardids[1] and other boardids[] parameters due to unsafe input handling, allowing remote attackers to execute arbitrary SQL commands. Publi...
CVE-2007-0388
SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...
Mac OS X Multiple Vulnerabilities (Security Update 2006-001)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...
CVE-2005-0388
Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."...
[SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
CVE-2005-0388
CVE-2005-0388 applies to remstats' remoteping service in versions up to 1.0.13. The vulnerability arises from missing input sanitising, enabling remote command execution. Debian DSA-704-1 fixes the issue in remstats (uptstream: version 1.0.13a-5 for sid; 1.00a4-8woody1 for woody). Red Hat advisor...
[Full-disclosure] [SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
RHEL 2.1 : mailman (RHSA-2002:125)
Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.11...
CVE-2004-0388
CVE-2004-0388 affects the MySQL server via the mysqld_multi script, allowing a local user to overwrite arbitrary files through a symlink attack. The root cause is insecure handling of temporary/target paths, enabling a symlink-based overwrite. The documented impact is local access with partial in...
CVE-2004-0388
The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...
CVE-2003-0388
pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...
CVE-2003-0388
CVE-2003-0388 concerns the pam_wheel module in Linux-PAM where, if the trust option is enabled and use_uid is disabled, local users can spoof getlogin() results and potentially gain privileges. The issue affects Linux-PAM versions up to 0.77 (notably around the pam_wheel and pam_lastlog handling ...
CVE-2003-0388
pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...
CVE-2003-0388
pamwheel in Linux-PAM 0.78, with the trust option enabled and the useuid option disabled, allows local users to spoof log entries and gain privileges by causing getlogin to return a spoofed user name...
CVE-2002-0388
Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via 1 the admin login page, or 2 the Pipermail index summaries...
CVE-2002-0388
CVE-2002-0388 affects Mailman releases prior to 2.0.11, enabling remote XSS via the admin login page or Pipermail index summaries. The root cause is cross-site scripting in Mailman’s web interfaces. Public advisories and OpenVAS/Nessus entries corroborate a fix in 2.0.11 (debian/DSA-147-1/DSA-147...
CVE-2001-0388
time server daemon timed allows remote attackers to cause a denial of service via malformed packets...
CVE-2001-0388
CVE-2001-0388 concerns the time server daemon, timed. The Mandrake advisory (MDKSA-2001:034) states a bug in timed can be triggered remotely to crash the time server daemon, enabling a remote denial-of-service. The advisory references the affected Mandrake/Linux packages and provides upgrade inst...