Debian DSA-2164-1 : shadow - insufficient input sanitization

Kees Cook discovered that the chfn and chsh utilities do not properly sanitize user input that includes newlines. An attacker could use this to corrupt passwd entries and may create users or groups in NIS environments. Packages in the oldstable distribution lenny are not affected by this problem...

CVE-2011-0721

CVE-2011-0721 affects the shadow package: CRLF injection in chfn and chsh allows local users to alter /etc/passwd via the GECOS field. Root cause is improper input sanitization of newline characters. Debian and Slackware advisories indicate an updated shadow package as the fix; exploitation detai...

[SECURITY] [DSA 2164-1] shadow security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2164-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2164-1] shadow security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2164-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

CVE-2010-0721

CVE-2010-0721 describes a SQL injection in news.php of the Auktionshaus Gelb 3.0 web app, exploitable via the id parameter. According to NVD, the vulnerability has a base score of 7.5 (HIGH), with NETWORK attack vector, LOW complexity, and no authentication required, potentially impacting confide...

CVE-2010-0721

SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0721

creationtimestamp| type| source ---|---|--- 2010-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11488...

HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software (RGS) Sender Running Easy Login, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01731970 Version: 1 HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software RGS Sender Running Easy Login, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should b...

CVE-2009-0721

CVE-2009-0721 affects HP Remote Graphics Software (RGS) Sender with Easy Login, v4.0.0–v5.2.4. An unspecified vulnerability in Easy Login allows remote code execution by an attacker over the network. HP’s Security Bulletin HPSBMA02427 rev.1 documents a fix: update to RGS v5.2.5 or later, or disab...

Gentoo Security Advisory GLSA 200507-14 (mozilla)

The remote host is missing updates announced in advisory GLSA 200507-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: pine, zh-pine, iw-pine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 641859e8-eca1-11d8-b913-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0721

The CVE-2008-0721 issue affects the Sermon (com_sermon) 0.2 component for Mambo, where an SQL injection is exploitable via the gid parameter in index.php. The vulnerability is described as allowing remote attackers to execute arbitrary SQL commands; CVSS v2 base score 7.5 (HIGH) with Network atta...

CVE-2007-0721

CVE-2007-0721 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.8 via the diskimages-helper component. The vulnerability allows remote user-assisted attackers to execute arbitrary code through a crafted compressed disk image that triggers memory corruption. This entry is supported by initial desc...

CVE-2006-0721

CVE-2006-0721 affects RunCMS versions 1.2 and 1.3a, with a vulnerability in pmlite.php that allows remote SQL execution via the to_userid parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) , with network attack vector, low complexity, and no authentication required. Impacts are des...

CVE-2005-0721

CVE-2005-0721 affects eXPerience2: remote PHP file inclusion via modules.php by modifying the file parameter to reference a remote URL containing code. This allows an attacker to execute arbitrary PHP code on the target server. The description from multiple sources confirms the vulnerability clas...

CVE-2004-0721

Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

CVE-2004-0721

Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

CVE-2004-0721

CVE-2004-0721 affects Konqueror 3.1.3, 3.2.2 (and possibly other versions) where a frame in one domain can inject content into a frame in another domain, enabling web site spoofing and related attacks. The vulnerability stems from insufficient cross-domain frame isolation, as described in KDE/SUS...

CVE-2003-0721

Integer signedness error in rfc2231getparam from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number...