Gentoo Security Advisory GLSA 200409-18 (cdrtools)

The remote host is missing updates announced in advisory GLSA 200409-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-18 (cdrtools)

The remote host is missing updates announced in advisory GLSA 200409-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 7 : wyrd-1.4.3b-1.fc7 (2008-1963)

Bug 433719 - CVE-2008-0806 Wyrd uses insecure temporary file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 8 : wyrd-1.4.3b-1.fc8 (2008-1986)

Bug 433719 - CVE-2008-0806 Wyrd uses insecure temporary file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CVE-2008-0806

The CVE-2008-0806 issue affects wyrd 1.4.3b, where a local user can exploit a symlink race to overwrite the wyrd-tmp.[USERID] temporary file. Fedora advisories (FEDORA-2008-1986 and FEDORA-2008-1963) and Red Hat entries confirm this vulnerability in wyrd 1.4.3b, describing an insecure temporary f...

Debian: Security Advisory (DSA-1031-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: pam security and bug fix update

cdrtools-2.01.0.a32-0.EL3.6 2.01.0.a32-0.EL3.6 - fix for CVE-2004-0813 - cdrecord and readcd are now suid, but with a pamconsole check - Resolves: rhbz232096 2.01.0.a32-0.EL3.3 - fix for CAN-2005-0866 "cdrecord insecure temporary file" 2.01.0.a32-0.EL3.2 - added patch for CAN-2004-0806, if s.o. w...

CVE-2007-0806

Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for adminews/indexfr.php3, and possibly the adminews index documents for other localizations...

CVE-2007-0806

Les News 2.2 contains an authentication bypass vulnerability (CVE-2007-0806) that lets remote attackers bypass login and potentially obtain administrative access by requesting adminews/index_fr.php3 directly (and possibly related localized index documents). The NVD entry cites an impact of partia...

CVE-2006-0806

Multiple cross-site scripting XSS vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via 1 the nextpage parameter in adodb-pager.inc.php and 2 other unspecified vectors related to PHPSELF...

Fedora Core 3 : evolution-2.0.4-4 (2005-338)

Fri Apr 22 2005 David Malcolm - 2.0.4-4 - Added the correct patch this time - Wed Apr 20 2005 David Malcolm - 2.0.4-3 - Added patch for 155378 CVE-2005-0806 - Updated mozillabuildversion from 1.7.6 to 1.7.7 Note that Tenable Network Security has extracted the preceding description block directly...

RHEL 4 : evolution (RHSA-2005:397)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:397 advisory. Evolution is a GNOME-based collection of personal information management PIM tools. A bug was found in the way Evolution displays mail...

CVE-2005-0806

CVE-2005-0806 affects Evolution (notably 2.0.3) and enables a remote attacker to cause a denial of service (application crash or hang) by sending crafted messages, with possible involvement of charset handling in attachment filenames. The issue is corroborated by multiple advisories: RHSA-2005:39...

CVE-2004-0806

CVE-2004-0806 affects cdrecord in the cdrtools package prior to 2.01, where cdrecord, when installed setuid root, fails to drop privileges before invoking a program specified by the RSH environment variable, enabling a local user to gain privileges. The issue is addressed in cdrtools 2.01 (upstre...

Fedora Core 2 : cdrtools-2.01-0.a27.4.FC2.3 (2004-298)

Anyone who has manually suid /usr/bin/cdrecord should update to this version. https://vulners.com/cve/CVE-2004-0806 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora Core 1 : cdrtools-2.01-0.a19.2.FC1.1 (2004-297)

Anyone who has manually suid /usr/bin/cdrecord should update to this version. https://vulners.com/cve/CVE-2004-0806 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

CVE-2003-0806

Buffer overflow in the Windows logon process winlogon in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code...

CVE-2003-0806

Buffer overflow in the Windows logon process winlogon in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code...

CVE-2003-0806

CVE-2003-0806 is a Winlogon buffer-overflow vulnerability in Windows NT 4.0 SP6a, Windows 2000 SP2–SP4, and Windows XP SP1 where a domain-joined user’s domain data is read during logon without proper bounds checking. The root cause is an unchecked size of a value used during logon that is inserte...

CVE-2002-0806

Bugzilla 2.14 prior to 2.14.2 and 2.16 prior to 2.16rc2 is vulnerable: authenticated users with editing privileges can delete other users by calling editusers.cgi with the "del" option. Affected versions include Bugzilla 2.14.x before 2.14.2 and 2.16.x before 2.16rc2. The issue, as described in t...