Debian Security Advisory DSA 1025-1 (dia)

The remote host is missing an update to dia announced via advisory DSA 1025-1. infamous41md discovered three buffer overflow errors in the xfig import code of dia, a diagram editor, that can lead to the execution of arbitrary code. For the old stable distribution woody these problems have been...

Debian: Security Advisory (DSA-628-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 618-1 (imlib)

The remote host is missing an update to imlib announced via advisory DSA 618-1. OpenVAS Vulnerability Test $Id: deb6181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 618-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1025-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: gpdf security update

Updated gpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME-based viewer for Portable Document Format PDF files. Alin Rad Pop discover...

CVE-2007-1025

PHP remote file inclusion vulnerability in inc/functionsinc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad, or possibly scriptpfad, parameter...

CVE-2007-1025

PHP remote file inclusion vulnerability in inc/functionsinc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad, or possibly scriptpfad, parameter...

Debian DSA-1025-1 : dia - programming error

'infamous41md' discovered three buffer overflow errors in the xfig import code of dia, a diagram editor, that can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

CVE-2006-1025

Cross-site scripting XSS vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web script or HTML via the ShipMethod parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1025

The provided sources describe CVE-2006-1025 as a cross-site scripting (XSS) vulnerability in Addsoft StoreBot 2002 Standard, affecting the manage.asp page. The issue is exploitable by remote attackers who can inject arbitrary script/HTML via the ShipMethod parameter. Affected software/component: ...

FreeBSD : imlib -- xpm heap buffer overflows and integer overflows (2001103a-6bbd-11d9-851d-000a95bc6fae)

Pavel Kankovsky reports : Imlib affected by a variant of CAN-2004-0782 too. I've discovered more vulnerabilities in Imlib 1.9.13. In particular, it appears to be affected by a variant of Chris Evans' libXpm flaw 1 CAN-2004-0782, see http://scary.beasts.org/security/CESA-2004-003.txt. Look at the...

CVE-2005-1025

CVE-2005-1025 : The AS/400 4.3 FTP server, when running in IFS mode, is vulnerable to a symlink attack via RCMD and the ADDLNK utility, enabling remote attackers to obtain sensitive information from the QSYS.LIB library. The issue is documented with a MEDIUM severity (CVSS v2 base score 5.0). No ...

CVE-2004-1025

Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...

CVE-2004-1025

Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...

CVE-2004-1025

CVE-2004-1025 concerns multiple heap-based buffer overflows in imlib 1.9.14 and earlier, a library used by gkrellm and several window managers. The vulnerability allows remote attackers to crash the application and, per the description, to execute arbitrary code via crafted image files, effective...

CVE-2003-1025

Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerabilit...

CVE-2003-1025

CVE-2003-1025 involves Internet Explorer 5.01–6 SP1 and is caused by an improper URL canonicalization in the HTTP URL parsing, enabling remote spoofing of the address bar with a specially crafted URL (example: a %01 before an @ sign). The vulnerability could let a malicious page display a false a...

CVE-2001-1025

PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable e.g., by including mainfile.php, such as article.php...

CVE-1999-1025

The CVE-1999-1025 issue affects Solaris 2.6 where the CDE screen lock program (screenlock) fails to lock an unprivileged user’s console session when the host is an NIS+ client, enabling anyone with physical access to login using arbitrary strings. Affected component: CDE screenlock on Solaris 2.6...

CVE-2001-1025

PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable e.g., by including mainfile.php, such as article.php...