[SECURITY] [DSA 2059-1] New pcsc-lite packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2059-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 10, 2010 http://www.debian.org/security/faq -...

CVE-2009-0407

CVE-2009-0407 affects PHP-CMS Project 1 and is caused by an SQL injection in admin/login.php, exploitable through the username parameter to allow remote execution of arbitrary SQL commands. Connected sources corroborate this vulnerability description; no specific patch version or remediation deta...

CVE-2009-0407

creationtimestamp| type| source ---|---|--- 2009-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7876...

CVE-2008-0407

CVE-2008-0407 affects HFS (HTTP File Server) up to version 2.2c. The vulnerability is a Username Spoofing issue where the server logs the username presented during HTTP Basic Authentication in request logs, even if authentication fails, which can mislead administrators about who actually made a r...

Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability

Syhunt: HFS HTTP File Server Username Spoofing and Log Forging/Injection Vulnerability Advisory-ID: 200801163 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 1.5g to and including 2.3Beta Build 174; and possibly HFS version 1.5f Non-Affected Applications: HFS 1.5e and...

CVE-2007-0407

CVE-2007-0407 describes a cross-site scripting (XSS) vulnerability in Plain Black WebGUI, specifically in Operation/User.pm for versions before 7.3.5 (beta). The issue arises from accepting a username during anonymous registration, allowing an attacker to inject arbitrary web script or HTML. The ...

CVE-2007-0407

Cross-site scripting XSS vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 beta allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate...

CVE-2006-0407

CVE-2006-0407 affects AZ Bulletin Board (AZbb) 1.1.00 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in post.php, exploitable via the nickname parameter and an iframe tag in the topic parameter, enabling injection of arbitrary HTML/JavaScript by an attacker. The description n...

CVE-2005-0407

CVE-2005-0407 is a cross-site scripting vulnerability in Openconf 1.04 (and possibly earlier versions prior to 1.10). Attackers can inject arbitrary HTML/JavaScript via the paper title, which can be executed when an admin reviews submissions, enabling potential session takeover or script executio...

CVE-2004-0407

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service disk consumption by repeatedly uploading files and interrupting the uploads before they finish...

CVE-2004-0407

The CVE concerns ColdFusion MX 6.1: HTML form upload does not reclaim disk space when uploads are interrupted, enabling a remote attacker to perform a denial of service via repeated interrupted uploads. Affected component is the upload handling; root cause is improper disk space reclamation after...

CVE-2003-0407

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...

CVE-2003-0407

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...

CVE-2003-0407

...

CVE-2003-0407

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...

CVE-2003-0407

CVE-2003-0407 describes a buffer overflow in gbnserver of Gnome Batalla Naval 1.0.4 that allows remote attackers to execute arbitrary code via a long connection string. The issue is evidenced across multiple sources (NVD entry and related advisories) noting remote code execution prospects with a ...

CVE-2003-0407

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string...

CVE-2002-0407

htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as 1 a request with a .pl or .java extension, or 2 a request containing a large number of...

CVE-2002-0407

htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as 1 a request with a .pl or .java extension, or 2 a request containing a large number of...

CVE-2002-0407

CVE-2002-0407 affects Lotus Domino server prior to 5.0.9a. The vulnerability lies in htcgibin.exe, which can leak the server’s physical pathname to remote attackers via specially crafted requests that include MS-DOS device names (e.g., com5) or long sequences (such as a request with a .pl or .jav...