104 matches found
[SECURITY] [DSA 1735-1] New znc packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1735-1 [email protected] http://www.debian.org/security/ Florian Weimer March 10, 2009 http://www.debian.org/security/faq -...
DSA-1735-1 znc - privilege escalation
Bulletin has no description...
Gentoo Security Advisory GLSA 200903-02 (znc)
The remote host is missing updates announced in advisory GLSA 200903-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2009-0759
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors...
CVE-2009-0759
CVE-2009-0759 affects znc, specifically the webadmin interface used to modify znc.conf. The root cause is missing input sanitization in configuration change requests, allowing CRLF injection that can elevate privileges of authenticated users and indirectly execute arbitrary commands. Disclosures ...
FreeBSD Ports: mozilla
The remote host is missing an update to the system as announced in the referenced advisory. VID 6e740881-0cae-11d9-8a8a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: mozilla
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-0759
CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...
CVE-2007-0759
CVE-2007-0759 affects EasyMoblog 0.5.1 with multiple SQL injection flaws. The vulnerabilities occur in add_comment.php (parameters i and post_id) and list_comments.php (parameter i), triggering injections in libraries.inc.php. This allows remote attackers to execute arbitrary SQL commands. The re...
Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:065)
A format string vulnerability was discovered in ImageMagick, in the way it handles filenames. An attacker could execute arbitrary code on a victim's machine provided they could trick them into opening a file with a special name CVE-2005-0397. As well, Andrei Nigmatulin discovered a heap-based...
CVE-2005-0759
CVE-2005-0759 affects ImageMagick prior to version 6.0, where processing a TIFF image with an invalid tag can cause an application crash (denial of service). The connected advisories confirm this TIFF-tag bug as part of multiple ImageMagick issues disclosed in 2005 and outline that fixed packages...
SUSE-SA:2005:017: ImageMagick
The remote host is missing the patch for the advisory SUSE-SA:2005:017 ImageMagick. This update fixes several security issues in the ImageMagick program suite: - A format string vulnerability was found in the display program which could lead to a remote attacker being to able to execute code as t...
DEBIAN-CVE-2005-0759
ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...
CVE-2004-0759
Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an tag...
CVE-2004-0759
CVE-2004-0759 affects Mozilla prior to version 1.7. The flaw lets a remote server read arbitrary files by JavaScript setting the value of an input type="file" element. Multiple OpenVAS entries and vendor advisories corroborate Mozilla involvement, but no specific exploit details or patch versions...
CVE-2003-0759
CVE-2003-0759 describes a local privilege escalation in IBM DB2 Universal Data Base 7.2 for Linux (x86 and s390) via a stack-based buffer overflow in the setuid binary db2licm. The issue is triggered by a long command line and can grant root privileges. Vendor fixes are provided in Fixpak 10a for...
CVE-2002-0759
CVE-2002-0759 affects bzip2 prior to 1.0.2, notably in FreeBSD 4.5 and earlier and OpenLinux 3.1/3.1.1. The issue is that bzip2 does not use the O_EXCL flag to create files during decompression and does not warn if an existing file would be overwritten. This could allow an attacker to overwrite f...
CVE-2002-0759
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the OEXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a...
