FreeBSD Ports: rssh

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-0609

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0609

CVE-2008-0609 describes a directory traversal vulnerability in DivideConcept VHD Web Pack 2.0 (index.php) that allows remote attackers to include and execute arbitrary local files via .. in the page parameter. The NVD lists a base score of 7.5 (HIGH) with network access, low attack complexity, an...

Solaris 5.9 (sparc) : 125276-08

Directory Server Enterprise Edition 6.3.1 : SunOS 5.9/5.10 Sparc N. Date this patch was last updated by Sun : Feb/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/12/27. C Tenable Network...

CVE-2007-0609

CVE-2007-0609 affects Advanced Guestbook 2.4.2, where a directory-traversal flaw allows an unauthenticated remote attacker to bypass .htaccess and cause local PHP code execution or template reads by submitting a crafted lang cookie value (dot-dot) and a filename without a .php extension in index....

[Full-disclosure] Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability

netVigilance Security Advisory 13 Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability Description: Advanced Guestbook is a PHP-based guestbook script. It includes many useful features such as preview, templates, e-mail notification, picture upload, page spanning , html tags handlin...

CVE-2006-0609

CVE-2006-0609 : The vulnerability affects Hinton Design’s phphd 1.0, specifically the add.php script, where a Cross‑Site Scripting (XSS) flaw allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Multiple independent sources (NVD entry, eVuln/SEC references, and Pack...

CVE-2004-0609

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail...

Debian DSA-049-1 : cfingerd

Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...

CVE-2004-0609

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail...

CVE-2004-0609

CVE-2004-0609 affects the rssh project (versions 2.0 through 2.1.x), where command-line arguments are expanded before entering a chroot jail. This behavior lets remote authenticated users determine the existence of files in directories outside the jail (file-name disclosure). The root cause is ar...

CVE-2003-0609

Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LDPRELOAD environment variable...

Immunity Canvas: SOLARIS_LD_PRELOAD

Name| solarisLDPRELOAD ---|--- CVE| CVE-2003-0609 Exploit Pack| CANVAS Description| Solaris LDPRELOAD debug edition Notes| References: http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-55680-1 CVE Name: CVE-2003-0609 VENDOR: Sun Notes: This is a classic local root elevation environmen...

CVE-2003-0609

Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LDPRELOAD environment variable...

CVE-2003-0609

CVE-2003-0609 describes a stack-based buffer overflow in Sun Solaris’ runtime linker ld.so.1 (vulnerable on Solaris 2.6–9) that lets local users gain root privileges when LD_PRELOAD is long. The root cause is a overflow in the dynamic linker when processing LD_PRELOAD, enabling a local privilege ...

CVE-2002-0609

Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service system failure with "SA1457 out of iporttimeout.fixupmessageframe" via malformed IP packets...

CVE-2002-0609

CVE-2002-0609 describes a vulnerability in HP MPE/iX 6.0 through 7.0 that can cause a denial of service (system failure described as “SA1457 out of i_port_timeout.fix_up_message_frame”) when processing malformed IP packets. The provided sources identify the affected product family and the attack ...

CVE-2001-0609

CVE-2001-0609 affects Infodrom cfingerd 1.4.3 and earlier. A format string vulnerability in the ident reply that is passed to the syslog function enables a remote attacker to gain additional privileges. Several connected sources corroborate that cfingerd’s logging/ident handling allows privilege ...

CVE-2001-0609

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function...

CVE-2000-0609

NetWin dMailWeb and cwMail (≤2.6g) are susceptible to a denial-of-service triggered by a long username parameter, causing partial availability impact. The documents provide no detailed root-cause, exploit, official remediation, or patch information beyond the version range. No further technical s...