CVE-2010-0542

CVE-2010-0542 affects the CUPS texttops image filter in the Text Filter subsystem. The _WriteProlog function fails to check calloc return values, which can lead to a NULL pointer dereference or heap memory corruption when processing crafted files. This may allow a remote attacker to cause a denia...

CUPS texttops过滤器空指针引用漏洞

BUGTRAQ ID: 40943 CVE ID: CVE-2010-0542 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数 PostScript和raster打印机服务。 CUPS的texttops过滤器中缺少内存分配失败检查导致了空指针引用。攻击者可以创建恶意的文本文件，如果打印了该文件就会导致texttops崩溃或以lp用户权限执行任意代码。 Easy Software Products CUPS 1.4.4 厂商补丁： Easy Software...

CentOS 3 / 4 / 5 : cups (CESA-2010:0490)

Updated cups packages that fix three security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

CUPS < 1.4.4 Multiple DoS and Privilege Escalation Vulnerabilities

CUPS Common UNIX Printing System service is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RedHat Update for cups RHSA-2010:0490-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2010:0490-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for cups RHSA-2010:0490-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2010:0490-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Core 10 FEDORA-2009-9386 (proftpd)

The remote host is missing an update to proftpd announced via advisory FEDORA-2009-9386. OpenVAS Vulnerability Test $Id: fcore20099386.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9386 proftpd Authors: Thomas Reinke Copyright: Copyright c 2009...

Debian Security Advisory DSA 1730-1 (proftpd-dfsg)

The remote host is missing an update to proftpd-dfsg announced via advisory DSA 1730-1. OpenVAS Vulnerability Test $Id: deb17301.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1730-1 proftpd-dfsg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Debian DSA-1730-1 : proftpd-dfsg - SQL injection vulnerabilites

The security update for proftpd-dfsg in DSA-1727-1 caused a regression with the postgresql backend. This update corrects the flaw. Also it was discovered that the oldstable distribution etch is not affected by the security issues. For reference the original advisory follows. Two SQL injection...

DSA-1730-1 proftpd-dfsg - SQL injection vulnerabilites

Bulletin has no description...

[SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites

-------------------------------------------------------------------------- Debian Security Advisory DSA 1727-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 26th, 2009 http://www.debian.org/security/faq -...

DSquare Exploit Pack: D2SEC_PROFTPD_MODSQL

Name| d2secproftpdmodsql ---|--- CVE| CVE-2009-0542 Exploit Pack| D2ExploitPack Description| d2secproftpdmodsql Notes|...

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

CVE-2009-0542

ProFTPD is affected by CVE-2009-0542 and related CVEs. Affects ProFTPD Server 1.3.1–1.3.2rc2 where a percent character in the username can introduce a single quote during mod_sql variable substitution, enabling remote SQL execution. Connected documents also indicate older

Fedora Core 9 FEDORA-2009-0542 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-0542. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Gentoo Security Advisory GLSA 200310-03 (Apache)

The remote host is missing updates announced in advisory GLSA 200310-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0542

Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-0542

The CVE-2008-0542 entry concerns a directory traversal vulnerability in thumbnail.php of Gerd Tentler Simple Forum 3.2. The underlying issue is path traversal via a .. in the file parameter, allowing remote attackers to read arbitrary files. Affected software is Simple Forum 3.2; the exact root c...