AINS function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0570)

A code execution vulnerability has been reported in Johannes Gijsbers Ad Fundum Integratable News Script AINS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2012-0570

CVE-2012-0570 is described as an unspecified local vulnerability in Solaris 8–11 related to Libraries/Libc. Multiple connected sources confirm the issue affecting Solaris components (Libraries/Libc) and note exploitability conditions: the vulnerability is easily exploitable with local OS access a...

Gentoo Security Advisory GLSA 201201-19 (acroread)

The remote host is missing updates announced in advisory GLSA 201201-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE Security Update : acroread (openSUSE-SU-2011:0156-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. acroread was updated to version 9.4.2 to address the issues. CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0585, CVE-2011-0586,...

SuSE 10 Security Update : acroread (ZYPP Patch Number 7358)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

SuSE 11.1 Security Update : acroread (SAT Patch Number 4057)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7359)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

Adobe Reader Multiple Vulnerabilities (Feb 2011) - Linux

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2011-0570

CVE-2011-0570 affects Adobe Reader and Acrobat on Windows, via an untrusted search path that allows local users to gain privileges by placing a Trojan DLL in the current working directory. Affected: Acrobat/Reader 10.x prior to 10.0.1; 9.x prior to 9.4.2; 8.x prior to 8.2.6. Root cause: untrusted...

CVE-2010-0570

CVE-2010-0570 affects Cisco Digital Media Manager (DMM) versions 5.0.x and 5.1.x. The issue is default credentials for the Tomcat administration account, enabling an attacker to gain full control over the web applications and potentially execute arbitrary code via a crafted web request. The Cisco...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager Advisory ID: cisco-sa-20100303-dmm http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmm.shtml Revision 1.0 For Public Release 2010 March 03 1600 UTC GMT...

CVE-2009-0570

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0570

The CVE-2009-0570 entry describes a Directory traversal vulnerability in Ninja Designs Mailist 3.0 (send.php) that is exploitable when PHP register_globals is enabled and magic_quotes_gpc is disabled. An attacker can use a .. path in the load parameter to include and execute arbitrary local files...

CVE-2008-0570

The CVE affects the OpenID 5.x-1.0 and earlier Drupal module. The root cause is that the module does not properly verify the claimed_id returned by an OpenID provider, enabling remote OpenID providers to spoof OpenID authentication for domains associated with other providers. The consequence is u...

Solaris 9 (x86) : 122301-61

SunOS 5.9x86: Kernel Patch. Date this patch was last updated by Sun : Nov/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-0570

CVE-2007-0570 affects the Ad Fundum Integratable News Script (AINS) 0.02b. A PHP remote file inclusion flaw in the ains_path parameter can allow a remote attacker to execute arbitrary PHP code on the affected system. The underlying issue is ains_path accepting user-controllable input that is used...

EV0061.txt

New eVuln Advisory: phpstatus Authentication Bypass http://evuln.com/vulns/61/summary.html --------------------Summary---------------- eVuln ID: EV0061 CVE: CVE-2006-0570 CVE-2006-0571 CVE-2006-0572 Vendor: Hinton Design Vendor's Web Site: http://www.hintondesign.org Software: phpstatus Sowtware'...

CVE-2005-0570

PunBB 1.2.1 contains a vulnerability in profile.php that allows remote attackers to cause a denial of service (account lockout) by setting a user’s password to NULL. This is the concrete vulnerability described in CVE-2005-0570 across sources (NVD/NIST and CVE list). The connected documents also ...

Solaris 9 (sparc) : 112874-47

SunOS 5.9: libc patch. Date this patch was last updated by Sun : Oct/29/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1351...

CVE-2002-0570

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key...