136 matches found
FreeBSD Ports: postnuke
The remote host is missing an update to the system as announced in the referenced advisory. VID f3eec2b5-8cd8-11d9-8066-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian Security Advisory DSA 362-1 (mindi)
The remote host is missing an update to mindi announced via advisory DSA 362-1. OpenVAS Vulnerability Test $Id: deb3621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 362-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2007-0617
The CVE-2007-0617 entry involves Earthlink TotalAccess’s SpamBlocker.dll ActiveX control, which is labeled “safe for scripting.” This misclassification enables a remote attacker to modify the spam‑blocker whitelist by invoking AddSenderToWhitelist or AddDomainToWhitelist, allowing arbitrary addre...
kernel security update
CentOS Errata and Security Advisory CESA-2006:0617 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...
CVE-2006-0617
The CVE-2006-0617 entry describes multiple unspecified vulnerabilities in Sun Java JDK/JRE 5.0 Update 5 and earlier that allow remote attackers to bypass the Java sandbox via reflection APIs, enabling privilege escalation. Affected components are Sun JDK/JRE implementations; the underlying issue ...
CVE-2005-0617
CVE-2005-0617 describes an SQL injection vulnerability in PostNuke versions 0.750 and 0.760-RC2 that allows remote attackers to execute arbitrary SQL commands via the show parameter in dl-search.php. The issue is confirmed by the NVD entry and related OpenVAS/Nessus advisories referencing PostNuk...
Debian DSA-362-1 : mindi - insecure temporary file
mindi, a program for creating boot/root disks, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running mindi. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2004-0617
Cross-site scripting XSS vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter...
CVE-2003-0617
CVE-2003-0617 affects mindi ≤ 0.58, where insecure temporary file creation allows local users to overwrite arbitrary files. Debian DSA-362-1 fixes this by updating mindi to 0.58.r5-1woody1. Impact is local, with partial confidentiality, integrity, and availability implications as per CVSS. No exp...
CVE-2003-0617
mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
CVE-2002-0617
CVE-2002-0617 affects Microsoft Excel 2000 and 2002 on Windows. The vulnerability allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, known as the Hyperlinked Excel Workbook ...
CVE-2002-0617
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."...
CVE-2001-0617
Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14, when the portmapper and the Virtual Server feature are enabled, allows a remote attacker to access mapped services even if single port mappings are disabled. The issue points to a misconfiguration or vulnerability in the router’s port...
CVE-2000-0617
The CVE-2000-0617 issue is a buffer overflow in the xconq and cconq game programs on Red Hat Linux that allows local privilege escalation via a long USER environment variable. The connected documents confirm the vulnerable components (xconq/cconq) and the root cause (buffer overflow triggered by ...