Gentoo Security Advisory GLSA 201210-06 (libav)

The remote host is missing updates announced in advisory GLSA 201210-06. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-0853

The decodeTonalComponents function in the Actrac3 codec atrac3.c in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-0853

The decodeTonalComponents function in the Actrac3 codec atrac3.c in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-0853

Technical details are not publicly available in the connected documents; the initial entry lists the Atrac3/FFmpeg Libav issue but no further technical specifics are provided here. Monitor for updates.

CVE-2011-0853

CVE-2011-0853 affects Oracle PeopleSoft Enterprise HRMS 9.0 Bundle #15 and 9.1 Bundle #5. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance. The provided documents do not specify t...

CVE-2010-0853

Technical details for CVE-2010-0853 are not publicly available in the provided documents. No concrete affected product/version or exploit information is provided. Monitor for updates in connected sources for any published specifics.

CVE-2009-0853

login.php in CelerBB 0.0.2, when magicquotesgpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin' parameter value...

CVE-2009-0853

CVE-2009-0853 affects CelerBB 0.0.2. When magic_quotes_gpc is disabled, remote attackers can bypass authentication and gain administrative access by submitting a crafted Username value (e.g., admin'#) to login.php. Verified in multiple sources; impact is authentication bypass with partial confide...

CVE-2009-0853

login.php in CelerBB 0.0.2, when magicquotesgpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin' parameter value...

CVE-2009-0853

creationtimestamp| type| source ---|---|--- 2009-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8161...

CVE-2008-0853

CVE-2008-0853 describes an SQL injection in the com_detail component of Joomla! and Mambo, exploitable via the id parameter to index.php. The underlying issue is a vulnerability in how user-supplied id values are used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Af...

DevTrack Web Service UserName Field SQL Injection

The remote host is running DevTrack, a defect and project tracking tool. The DevTrack Web Services component installed on the remote host contains an ASP script that fails to sanitize user-supplied input to the 'UserName' parameter before using it in a database query. An unauthenticated, remote...

CVE-2007-0853

CVE-2007-0853 is a SQL injection in DevTrack 6.0.3. The vulnerability resides in the Web Services component’s handling of the 'UserName' parameter, where unsanitized input is used in a database query. An unauthenticated, remote attacker could manipulate SQL queries via the Username form field, po...

CVE-2006-0853

CVE-2006-0853 describes a buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4. The vulnerability allows remote authenticated users to crash the IMAP server and potentially execute arbitrary code via a long SEARCH argument. The Nessus entry corroborates that a...

CVE-2005-0853

betaparticle blog bp blog stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to 1 dbBlogMX.mdb for versions before 3.0, or 2 Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions...

CVE-2005-0853

The CVE-2005-0853 entry concerns betaparticle blog (bp blog) where the database files are stored under the web root, enabling direct access to sensitive data via HTTP requests. Affected files are (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later, with vector 2 a...

CVE-2005-0853

betaparticle blog bp blog stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to 1 dbBlogMX.mdb for versions before 3.0, or 2 Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions...

RHEL 2.1 : fileutils (RHSA-2003:310)

Updated fileutils packages that close a potential denial of service vulnerability are now available. The fileutils package contains several basic system utilities. One of these utilities is the 'ls' program, which is used to list information about files and directories. Georgi Guninski discovered...

CVE-2003-0853

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd...

CVE-2003-0853

CVE-2003-0853 refers to an integer overflow in the ls utility within the fileutils/coreutils packages. The flaw can allow local users to cause a denial of service or potentially execute arbitrary code when applications pass large -w arguments to ls (notably via services such as wu-ftpd). Document...