Debian Security Advisory DSA 402-1 (minimalist)

The remote host is missing an update to minimalist announced via advisory DSA 402-1. OpenVAS Vulnerability Test $Id: deb4021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 402-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

USN-423-1: MoinMoin vulnerabilities

A flaw was discovered in MoinMoin's debug reporting sanitizer which could lead to a cross-site scripting attack. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication...

CVE-2007-0902

Removed by vendor...

CVE-2007-0902

CVE-2007-0902 is an information-disclosure issue in MoinMoin 1.5.7 related to the Show debugging information feature and debug reporting, leading to leakage of sensitive host/software information. Connected advisories confirm exposure via debug traces and logs, including an information leak about...

CVE-2005-0902

CVE-2005-0902 affects NukeBookmarks 0.6 for PHP-Nuke, with an SQL injection in marks.php via the category parameter that allows remote SQL execution. CVSS v2 base score 7.5 (HIGH); impact includes partial confidentiality, integrity, and availability. No remediation or exploit details are provided...

Debian DSA-402-1 : minimalist - unsanitised input

A security-related problem has been discovered in minimalist, a mailing list manager, which allows a remote attacker to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2001-0902

Microsoft IIS 5.0 is affected. The vulnerability allows remote attackers to spoof web log entries by sending HTTP requests containing hex-encoded newline or form-feed characters, enabling log pollution/improper logging. CVE-2001-0902 details indicate impact to log integrity (partial) and potentia...

CVE-2001-0902

Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters...

CVE-2003-0902

Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands...

CVE-2003-0902

CVE-2003-0902 affects minimalist, a mailing-list manager. Public details in Debian DSA-402 describe a remote code-execution vulnerability caused by unsanitised input in minimalist versions 2.4 and 2.2 (and possibly other builds). Debian advisories state fixed packages: 2.2-4 for woody (stable) an...

CVE-2002-0902

CVE-2002-0902 describes a cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2). An attacker can cause script execution in other phpBB users’ browsers by inserting a http:// and a double-quote (") into an IMG tag, bypassing phpBB’s security check, which terminates the src parameter of the IM...

CVE-2001-0902

Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters...

CVE-2000-0902

CVE-2000-0902 affects PhotoAlbum (getalbum.php) prior to version 0.9.9. The vulnerability allows remote attackers to read arbitrary files via a directory traversal (..). NVD lists a CVSSv2 base score of 5.0 (Medium) with partial confidentiality impact; no exploitation details or patch information...

CVE-2000-0902

getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0902

CVE-1999-0902 affects ypserv (noted in multiple feeds, including CBLMARINER and PT-1999-1448) with the vulnerability enabling local administrators to modify password tables. Affected package/version cited: ypserv 4.1-4. The core issue is an improper handling that allows a local privileged user to...