apache22 -- several vulnerabilities

Apache HTTP SERVER PROJECT reports: low: XSS in modnegotiation when untrusted uploads are supported CVE-2012-2687 Possible XSS for sites which use modnegotiation and allow untrusted uploads to locations which have MultiViews enabled. low: insecure LDLIBRARYPATH handling CVE-2012-0883 This issue w...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. VID de2bc01f-dc44-11e1-9f4d-002354ed89bc OpenVAS Vulnerability Test $ Description: Auto generated from VID de2bc01f-dc44-11e1-9f4d-002354ed89bc Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-0883

CVE-2012-0883 affects the Apache HTTP Server up to version 2.4.2, where the envvars (envvars-std) feature places a zero-length directory name in LD_LIBRARY_PATH. This enables local users to gain privileges by exploiting a Trojan horse DSO in the current working directory during execution of apach...

CVE-2012-0883

envvars aka envvars-std in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl...

CVE-2010-0883

Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884...

CVE-2010-0883

CVE-2010-0883 concerns Sun Cluster in Oracle Sun Product Suite 3.1/3.2. Affected are Solaris/Sun Cluster environments, with references tying this CVE to Data Service for Oracle E-Business Suite. The connected Nessus entries indicate Solaris 8/9/10 patches (e.g., 143047-02, 143048-02, 143049-02; 1...

RHEL 3 / 4 / 5 : acroread (RHSA-2008:0641)

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Acrobat Reader allows users to view and pri...

CVE-2009-0883

CVE-2009-0883 involves a SQL injection in Blue Eye CMS 1.0.0 and earlier when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the BlueEyeCMS_login cookie parameter. Affected software is Blue Eye CMS (version 1.0.0 and earlier); root cause is uns...

CVE-2009-0883

creationtimestamp| type| source ---|---|--- 2009-03-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8165...

Gentoo Security Advisory GLSA 200803-26 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Acrobat Reader allows users to view and pri...

GLSA-200803-26 : Adobe Acrobat Reader: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-26 Adobe Acrobat Reader: Insecure temporary file creation SUSE reported that the 'acroread' wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact : A local...

CVE-2008-0883

Adobe Acrobat Reader (acroread) 8.1.2 is affected by CVE-2008-0883 due to an insecure temporary-file creation in the startup/SSL-related handling, enabling a local attacker to overwrite arbitrary files via a symlink attack. Affected component: acroread wrapper script; root cause is insecure tempo...

openSUSE 10 Security Update : acroread (acroread-5041)

Adobe Acrobat Reader 8.1.2 contained a /tmp race in its 'acroread' wrapper script in the SSL certificate handling. CVE-2008-0883 Furthermore it contained several duplicated copies of system libraries, which have been removed for this update to make sure they are up-to-date security wise by using...

Debian: Security Advisory (DSA-1082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1070-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0883

CVE-2007-0883 describes a directory traversal in IP3 NetAccess’s portalgroups/getfile.cgi. The flaw allows remote attackers to read arbitrary files by supplying a .. sequence in the filename parameter, affecting devices running firmware before 4.1.9.6. The vulnerability impact is described as par...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

CVE-2006-0883

CVE-2006-0883 affects OpenSSH running on FreeBSD 5.3/5.4 when used with OpenPAM. The vulnerability arises because a forked PAM-authentication child may terminate in an unexpected way, which can be exploited by remotely connecting to the SSH server, waiting for the password prompt, and then discon...