Gentoo Security Advisory GLSA 200803-06 (sword)

The remote host is missing updates announced in advisory GLSA 200803-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

[SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1508-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 25, 2008 http://www.debian.org/security/faq -...

CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

CVE-2008-0932

CVE-2008-0932 affects The SWORD Project’s Diatheke: diatheke.pl (Diatheke 1.5.9 and earlier) is vulnerable to remote command execution via shell metacharacters in the range parameter. Root cause: inadequate sanitization of shell meta-characters. Impact: remote attacker could run arbitrary command...

CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

[SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1508-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 25, 2008 http://www.debian.org/security/faq -...

CVE-2007-0932

The CVE-2007-0932 entry affects Aruba Mobility Controllers (models 200, 600, 2400, 6000) and Alcatel-Lucent OmniAccess Wireless (43xx and 6000). The root issue is improper authentication and privilege assignment for the guest account, enabling remote attackers to access administrative interfaces ...

CVE-2006-0932

The CVE-2006-0932 entry describes a directory traversal vulnerability in PEAR::Archive_Zip (zip.lib.php 0.1.1). The affected component is zip.lib.php within PEAR::Archive_Zip, where crafted ZIP archive pathnames allow remote attackers to create or overwrite arbitrary files. The published descript...

CVE-2005-0932

CVE-2005-0932 describes multiple SQL injection flaws in phpCOIN 1.2.1b and earlier, exploitable via the search engine, forgotten-password username/email fields, or the domain name in package orders. The underlying issue is unsafe SQL construction in these modules, enabling remote attackers to exe...

CVE-2004-0932

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from bei...

CVE-2004-0932

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from bei...

CVE-2004-0932

The CVE-2004-0932 issue affects McAfee Anti-Virus Engine DATS drivers before 4398 (and the DATS Driver before 4397). A crafted ZIP archive with both local and global headers set to zero can bypass antivirus protection and still be opened on the target system. This is a remote-exploitation-style b...

CVE-2003-0932

CVE-2003-0932 corresponds to a buffer overflow in omega-rpg 0.90 that allows local users to execute arbitrary code via a long command line or environment variable. The Debian advisory DSA-400-1 notes this requires updating the omega-rpg package to remediate the issue; other sources likewise refer...

CVE-2000-0932

MAILsweeper for SMTP 3.x is affected by a vulnerability where corrupt CDA documents in a ZIP file are not handled properly, causing the application to hang and enabling a remote denial of service . The description does not provide exploit specifics, affected versions beyond the 3.x line, or remed...

CVE-2000-0932

MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service...

CVE-1999-0932

CVE-1999-0932 affects Mediahouse Statistics Server. The vulnerability allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file. Impact is confidentiality compromise of admin credentials with remote access implied; CVSS 2.0 vector indicates local ...