Debian Security Advisory DSA 429-2 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 429-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0971

Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the...

CVE-2007-0971

Jupiter CMS 1.1.5 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and other headers that set the ip variable used in queries in index.php and related PHP scripts. This is the underlying cause: input ...

CVE-2006-0971

CVE-2006-0971 describes a directory traversal vulnerability in Lionel Reyero DirectContact 0.3b, enabling remote attackers to read arbitrary files by supplying a .. sequence in the URL. The affected software/version is DirectContact 0.3b (Lionel Reyero). The available connected documents confirm ...

CVE-2005-0971

The CVE-2005-0971 entry describes a stack-based buffer overflow in the semop system call on Mac OS X 10.3.9 and earlier that enables local privilege escalation via crafted arguments. Impact is local privilege gain; CVSSv2 base score 4.6 (Medium). Affected: Mac OS X 10.3.x before 10.3.9. Root caus...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The CVE-2004-0971 issue affects the krb5-send-pr script in the krb5 package, allowing local users to overwrite files via a symlink attack on temporary files. Description in the sources notes this vulnerability for Trustix Secure Linux 1.5–2.1 and potentially other OSes. The vulnerability originat...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

Debian DSA-429-1 : gnupg - cryptographic weakness

Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing. This update disables the use of this type of key. %NASLMINLEVEL 70300 C Tenable Netwo...

CVE-2001-0971

CVE-2001-0971 affects the ACI/4D WebServer. The 4D WebServer (versions 6.5.7 and earlier) fails to validate HTTP requests, enabling directory traversal that allows remote attackers to read arbitrary files outside the web root. Impact is remote file disclosure with web server privileges. The CERT/...

CVE-2000-0971

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...

CVE-2000-0971

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...

CVE-2000-0971

Affected software : Avirt Mail 4.0 and 4.2. Vulnerability : Remote attackers can trigger a denial of service and possibly execute arbitrary commands by sending an abnormally long RCPT TO or MAIL FROM command via SMTP. Root cause / details : The available documents describe the impact but do not e...