CentOS Update for krb5-devel CESA-2009:0409 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2082-1 : gmime2.2 - buffer overflow

It was discovered that a buffer overflow in the MIME library GMime might lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2082. The text itself is...

[SECURITY] [DSA 2082-1] New gmime2.2 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2082-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 02, 2010 http://www.debian.org/security/faq -...

openSUSE Security Update : gmime (gmime-1997)

This update of gmime fixes a buffer overflow in the GMIMEUUENCODELEN macro which allowed possible code execution while processing uuencoded data. CVE-2010-0409: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11 Security Update : gmime (SAT Patch Number 1998)

This update of gmime fixes a buffer overflow in the GMIMEUUENCODELEN macro which allowed possible code execution while processing uuencoded data. CVE-2010-0409: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : gmime-2_4 (gmime-2_4-1983)

This update of gmime fixes a buffer overflow in the GMIMEUUENCODELEN macro which allowed possible code execution while processing uuencoded data. CVE-2010-0409: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : gmime (gmime-1997)

This update of gmime fixes a buffer overflow in the GMIMEUUENCODELEN macro which allowed possible code execution while processing uuencoded data. CVE-2010-0409: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2010-0409

GMime 2.4.x and 2.2.x releases fix a buffer overflow in the GMIME_UUENCODE_LEN macro (gmime/gmime-encodings.h). The issue could allow arbitrary code execution or a DoS via uuencode input. Affected: GMime libraries; root cause: buffer overflow. Remediation: upgrade to GMime 2.4.15+ (2.4.x branch) ...

CVE-2010-0409

Buffer overflow in the GMIMEUUENCODELEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via input data for a uuencode operation...

CentOS Security Advisory CESA-2009:0409 (krb5)

The remote host is missing updates to krb5 announced in advisory CESA-2009:0409. CESA-2009:0409 63903 4 $Id: ovcesa20090409.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0409 krb5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0409

SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-0409

CVE-2009-0409 is a SQL injection vulnerability in offline_auth.php of Max.Blog 1.0.6 and earlier. The issue occurs when magic_quotes_gpc is disabled, allowing an attacker to craft a username parameter that leads to arbitrary SQL execution. Affected product: Max.Blog (versions up to 1.0.6). Root c...

CVE-2009-0409

creationtimestamp| type| source ---|---|--- 2009-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7899...

Gentoo Security Advisory GLSA 200404-15 (xchat)

The remote host is missing updates announced in advisory GLSA 200404-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-0409

CVE-2008-0409 describes a cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) prior to 2.2c. The issue arises from how the server handles the userinfo subcomponent of a URL, allowing remote attackers to inject arbitrary web script or HTML into responses. Affected product: HFS (HTTP...

Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities

Syhunt: HFS HTTP File Server Template Cross-Site Scripting and Information Disclosure Vulnerabilities Advisory-ID: 200801161 Discovery Date: 1.16.2008 Release Date: 1.23.2008 Affected Applications: HFS 2.0 to and including 2.3Beta Build 174 Non-Affected Applications: HFS 1.6a and earlier versions...

CVE-2007-0409

CVE-2007-0409 affects BEA WebLogic Server versions 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release. The issue is that passwords stored in the JDBCDataSourceFactory MBean Properties are not encrypted, allowing a local administrator to read cleartext passwords. The provided docume...

CVE-2005-0409

CitrusDB 0.3.6 and earlier does not verify authorization for the 1 importcc.php and 2 uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of...

RHEL 2.1 / 3 : xchat (RHSA-2004:585)

An updated xchat package that fixes a stack-based buffer overflow in the SOCKSv5 proxy code. X-Chat is a graphical IRC chat client for the X Window System. A stack-based buffer overflow has been fixed in the SOCKSv5 proxy code. An attacker could create a malicious SOCKSv5 proxy server in such a w...

Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)

A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...