Debian: Security Advisory (DSA-1133-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0841

Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. NOTE: the vector related to Drupal is covered by CVE-2007-0626. These vulnerabilities might be associated with other CVE identifiers...

CVE-2007-0841

CVE-2007-0841 covers VBDrupal before 4.7.6.0 with multiple unspecified vulnerabilities; the Drupal-related vector is addressed by CVE-2007-0626. The linked CVE-0626 specifies a remote code execution path via previewing comments in Drupal (and vbDrupal) before 4.7.6.0 (Drupal 4.7.6 and 5.x before ...

Debian DSA-1133-1 : mantis - missing input sanitising

Several remote vulnerabilities have been discovered in the Mantis bug tracking system, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0664 A cross-site scripting vulnerability was discovered ...

CVE-2006-0841

CVE-2006-0841 is covered by multiple XSS vulnerabilities in Mantis 1.00rc4 and earlier. The affected components include view_all_set.php, manage_user_page.php, view_filters_page.php and proj_doc_delete.php (and related parameters). Connected advisories (Debian DSA-944-1/1133-1, Gentoo GLSA, OpenV...

CVE-2005-0841

CVE-2005-0841 describes an SQL injection in phpMyFamily 1.4.0 affecting multiple PHP files (people.php, track.php, edit.php, document.php, census.php, passthru.php, and possibly others). The root cause is unsanitized input that allows remote attackers to execute arbitrary SQL commands, demonstrat...

CVE-2004-0841

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."...

CVE-2003-0841

CVE-2003-0841 concerns PeopleSoft 8.42 where the grid option stores temporary .xls files in guessable directories under the web document root. This can allow remote attackers to access the files directly via URL and steal search results, constituting a partial confidentiality impact as described ...

CVE-2002-0841

CVE-2002-0841 is a duplicate of CVE-2002-0842. The connected records show CVE-2002-0842 describing a format-string vulnerability in certain mod_dav implementations that log gateway errors. Oracle’s Open/9iAS 9.0.2 (Oracle9i Application Server 9.0.2) and related mod_dav modifications are cited as ...

CVE-2001-0841

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. dot dot sequences in the amembernamecookie cookie...

CVE-2001-0841

CVE-2001-0841 : Affected software is Ikonboard (Search.cgi in ib219 and earlier). The vulnerability is a directory traversal flaw that allows remote attackers to overwrite files and gain privileges by sending the dot-dot sequence in the amembernamecookie cookie. The available sources identify thi...

CVE-2000-0841

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command...

CVE-2000-0841

XMail POP3 server is vulnerable to a buffer overflow in the APOP command when processing long inputs, affecting versions before 0.59. This can allow a remote attacker to execute arbitrary commands (with some sources noting potential root-level impact). The connected documents provide vulnerabilit...

CVE-1999-0841

CVE-1999-0841 affects the CDE mailtool component. The vulnerability is a buffer overflow triggered by a long MIME Content-Type, enabling local users to gain root privileges. The available documents do not specify affected versions, exact root-cause details beyond the overflow, or any remediation/...