CVE-2008-0653

CVE-2008-0653 targets the Joomla! Ynews component (com_ynews) version 1.0.0. The vulnerability is a SQL injection in index.php’s showYNews action, where the id parameter can be manipulated to execute arbitrary SQL commands. This affects the server-side handling of the id value and can lead to dat...

SuSE 10 Security Update : XMMS (ZYPP Patch Number 3075)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files. CVE-2007-0653 / CVE-2007-0654 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Ubuntu 5.10 / 6.06 LTS / 6.10 : xmms vulnerabilities (USN-445-1)

Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...

openSUSE 10 Security Update : xmms (xmms-3073)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files CVE-2007-0653,CVE-2007-0654. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian DSA-1277-1 : XMMS - several vulnerabilities

Multiple errors have been found in the skin handling routines in xmms, the X Multimedia System. These vulnerabilities could allow an attacker to run arbitrary code as the user running xmms by inducing the victim to load specially crafted interface skin files. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1277-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 04, 2007 - ------------------------------------------------------------------------ Package : xmms Vulnerability :...

Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities

====================================================================== Secunia Research 21/03/2007 - XMMS Integer Overflow and Underflow Vulnerabilities - ===================================================================== Table of Contents Affected...

CVE-2007-0653

CVE-2007-0653 affects XMMS 1.2.10 and possibly earlier versions. Root cause: an integer overflow in the processing of skin bitmap images can trigger memory corruption, enabling user‑assisted remote code execution. Reported across multiple advisories; some Nessus/OpenVAS entries list the vulnerabi...

CVE-2006-0653

CVE-2006-0653 involves SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3, allowing remote attackers to execute arbitrary SQL commands via multiple vectors, including the username parameter. The connected records confirm the affected software and the underlying vulnerability class ...

Apache HTTP Server 'mod_ssl' Off By One Vulnerability

The remote host is using a version of modssl which is older than 2.8.10. This version is vulnerable to an off by one buffer overflow which may allow a user with write access to .htaccess files to execute arbitrary code on the system with permissions of the web server. SPDX-FileCopyrightText: 2002...

CVE-2005-0653

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended...

DEBIAN-CVE-2005-0653

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended...

CVE-2005-0653

CVE-2005-0653 affects phpMyAdmin 2.6.1 and concerns improper permission handling on tables whose names contain an underscore. The vulnerability allows remote authenticated users to obtain more privileges than intended for those tables, with a CVSSv2 base score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P)....

CVE-2005-0653

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended...

CVE-2004-0653

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pamkrb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files...

CVE-2004-0653

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pamkrb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files...

CVE-2004-0653

CVE-2004-0653 affects Solaris 9 when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an auth module with debug enabled. The issue causes passwords to be recorded in plaintext in log files, potentially allowing local users to read others’ passwords by inspec...

CVE-2003-0653

The OSI networking kernel sys/netiso in NetBSD 1.6.1 and earlier does not use a BSD-required "PKTHDR" mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service kernel panic or crash via certain OSI packets...

CVE-2003-0653

CVE-2003-0653 affects NetBSD 1.6.1 and earlier in the OSI networking kernel (sys/netiso). The vulnerability stems from not using a BSD-required PKTHDR mbuf when sending certain error responses to the sender of an OSI packet, which allows remote attackers to cause a denial of service (kernel panic...

CVE-2002-0653

Off-by-one buffer overflow in the sslcompatdirective function, as called by the rewritecommand hook for modssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries...