CVE-2012-0809

Format string vulnerability in the sudodebug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo...

CVE-2012-0809

Format string vulnerability in the sudodebug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo...

CVE-2012-0809

CVE-2012-0809 is a format-string vulnerability in the sudo_debug() function present in sudo versions 1.8.0 through 1.8.3p1, enabling local privilege escalation by supplying a crafted program name. The vulnerability is evidenced in multiple connected sources (Gentoo GLSA-201203-06, openSUSE patch ...

CVE-2012-0809

Format string vulnerability in the sudodebug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo...

CVE-2011-0809

Oracle E-Business Suite Web ADI component (versions 11.5.10.2, 12.0.6, 12.1.1–12.1.3) has an unspecified vulnerability that can compromise integrity via unknown vectors. The NVD CVE-2011-0809 entry notes network access with partial integrity impact. Red Hat and other records confirm the same issu...

SLES9: Security update for webdav apache module

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: moddav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013988 within the SuSE...

SLES9: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2 apache2-devel apache2-example-pages libapr0 apache2-worker apache2-doc apache2-prefork For more information, please visit the referenced security...

CVE-2009-0809

The CVE-2009-0809 issue affects Dassault Systèmes ENOVIA SmarTeam V5 before Release 18 Service Pack 8 (and possibly CATIA/other products). The vulnerability allows remote authenticated users to read the profile card of a document-class object via a link sent by the document owner. The underlying ...

[TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: VLC media player TiVo ty Processing Stack Overflow Vulnerability Advisory ID: TKADV2008-010 Revision: 1.0 Release Date: 2008/10/20 Last Modified: 2008/10/20 Date Reported: 2008/10/18 Author: Tobias Klein tk at trapkit.de Affected Software: V...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. VID 013fa252-0724-11d9-b45d-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1523-1 : ikiwiki - XSS

Josh Triplett discovered that ikiwiki did not block JavaScript in URLs, leading to cross-site scripting vulnerabilities CVE-2008-0808, CVE-2008-0809 . The old stable distribution sarge did not contain an ikiwiki package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

[SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1523-1 [email protected] http://www.debian.org/security/ Florian Weimer March 17, 2008 http://www.debian.org/security/faq -...

DSA-1523-1 ikiwiki - cross-site scripting

Bulletin has no description...

CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

CVE-2008-0809

The CVE-2008-0809 entry describes a Cross-Site Scripting (XSS) vulnerability in ikiwiki’s htmlscrubber prior to version 1.1.46. The flaw allows remote attackers to inject arbitrary script or HTML via the title contents, enabling script execution in a victim’s browser when viewing affected pages. ...

CVE-2007-0809

PHP remote file inclusion vulnerability in includes/classtemplate.php in Categories hierarchy aka CH or mod-CH 2.1.2 in ptirhiikmods allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-0809

The CVE-2006-0809 issue affects Skate Board 0.9. Vulnerable components are includes/root/sendpass.php and includes/root/login.php/logged.php; the adversary can exploit via input fields (POST: usern, passwd) and the cookie sf_cookie, as well as related server-side usage of these values in SQL quer...

CVE-2005-0809

CVE-2005-0809 affects NotifyLink server: when client key retrieval is enabled, an unauthenticated HTTP POST to /hwp/get.asp can disclose AES keys. The server uses a fixed byte reordering scheme to obfuscate the key, substantially weakening cryptographic protection and enabling brute-force recover...

CVE-2004-0809

CVE-2004-0809 affects the Apache mod_dav WebDAV module in Apache 2.0.50 and earlier, allowing remote attackers to cause a denial of service (child process crash) via a particular sequence of LOCK requests for locations with WebDAV access. Connected documents in OpenVAS/Tenable references corrobor...