218 matches found
php security update
CentOS Errata and Security Advisory CESA-2005:0705-001 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-July/074075.html https://lists.centos.org/pipermail/centos-announce/2005-July/074076.html Affected packages: php php-bcmath php-dba php-devel...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:306)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
CVE-2005-0705
CVE-2005-0705 affects Ethereal 0.10.7–0.10.9 via the GPRS-LLC dissector when the ignore cipher bit option is enabled, allowing remote attackers to cause an application crash (denial of service). Red Hat advisory RHSA-2005:306 recommends upgrading Ethereal to 0.10.10 to remediate the issue.
Mandrake Linux Security Advisory : ethereal (MDKSA-2005:053)
"A number of issues were discovered in Ethereal versions prior to 0.10.10, which is provided by this update. Matevz Pustisek discovered a buffer overflow in the Etheric dissector CVE-2005-0704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Security fix for the ALT Linux 9 package wireshark version 0.10.10-alt1
March 15, 2005 Sir Raorn 0.10.10-alt1 - 0.10.10 - Fixed: + CAN-2005-0699 + CAN-2005-0704 + CAN-2005-0705 - ethereal-devel and idl2eth are unusable. Dropped - libwiretap is back...
CVE-2004-0705
Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...
CVE-2004-0705
Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...
CVE-2004-0705
CVE-2004-0705 affects Bugzilla 2.16.x before 2.16.6 and Bugzilla 2.18 before 2.18rc1. The issue is multiple cross-site scripting (XSS) vulnerabilities in six CGI scripts (editcomponents.cgi, editgroups.cgi, editmilestones.cgi, editproducts.cgi, editusers.cgi, editversions.cgi) that allow remote a...
CVE-2004-0705
Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...
CVE-2003-0705
...
CVE-2003-0705
CVE-2003-0705 corresponds to a buffer overflow in mah-jong (versions 1.5.6 and earlier) that allowed remote attackers to execute arbitrary code. Multiple connected sources (Debian DSA-378-1, OpenVAS NASL, and related advisories) document this as a remote vulnerability in the mah-jong server/clien...
CVE-2001-0705
CVE-2001-0705 describes a directory traversal vulnerability in the Arcadia Internet Store 1.0 component tradecli.dll that allows a remote attacker to read arbitrary files on the web server by supplying URLs with "dot dot" sequences in the template argument. The public records (NVD) state the affe...
CVE-2000-0705
ntop running in web mode allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0705
CVE-2000-0705 : ntop running in web mode is vulnerable to a directory-traversal attack using ".." that enables remote attackers to read arbitrary files. The described impact is partial confidentiality, with no available details on exploitation status or a confirmed fix in the provided documents. ...
CVE-1999-0705
CVE-1999-0705 concerns a buffer overflow in INN inews. The interconnected sources indicate multiple vulnerabilities in INN