Gentoo Security Advisory GLSA 200411-33 (www-apps/twiki)

The remote host is missing updates announced in advisory GLSA 200411-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: twiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1037

CVE-2008-1037 affects Packeteer PacketShaper and PolicyCenter 8.2.2. The vulnerability is a Cross-site Scripting (XSS) in the web management interface: the FILELIST parameter to an arbitrary component in the file listing function enables remote attackers to inject arbitrary web script or HTML, wh...

CVE-2007-1037

CVE-2007-1037 describes a stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier, exploitable by a specially crafted .nzb file with a long subject field. The vulnerability allows remote attackers to execute arbitrary code, as indicated by the NVD entry which assigns a high impact an...

TWiki Search.pm shell command injection

Added: 04/06/2006 CVE: CVE-2004-1037 BID: 11674 OSVDB: 11714 Background TWiki is a web-based collaboration platform written in PERL. Problem The Search.pm module does not sufficiently check search strings for illegal characters, allowing remote attackers to execute commands using search strings...

CVE-2006-1037

SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2006-1037

The CVE affects the Oracle Diagnostics module (versions up to 2.2) where a SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. This is evidenced by the CVE entry and corroborating records (NVD/NVD-derived data). The connected documents...

CVE-2005-1037

The CVE entry CVE-2005-1037 concerns an unknown vulnerability in AIX 5.3.0 when configured as an NIS client that could allow remote attackers to gain root privileges. The connected sources do not provide technical details, affected subcomponents, exact root cause, exploitation method, or remediat...

CVE-2004-1037

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string...

CVE-2004-1037

CVE-2004-1037 affects TWiki prior to fix where the search function accepts a user-supplied search string. The vulnerability allows remote attackers to execute arbitrary OS commands by injecting shell metacharacters in the search parameter to the WebSearch script, potentially compromising the TWik...

TWiki Search Function Arbitrary Command Execution

This module exploits a vulnerability in the search component of TWiki. By passing a 'search' parameter containing shell metacharacters to a 'Search' script, an attacker can execute arbitrary OS commands. Affected versions: - 20040901 - 20030201 - 20011201 - 20001201 - SVN up to and including...

CVE-2003-1037

Format string vulnerability in the WGate component for SAP Internet Transaction Server ITS allows remote attackers to execute arbitrary code via a high "trace level."...

CVE-2003-1037

The CVE-2003-1037 entry describes a format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS). The issue allows remote attackers to execute arbitrary code by crafting input through a high “trace level.” The description does not provide specific affected versions...

CVE-2003-1037

Format string vulnerability in the WGate component for SAP Internet Transaction Server ITS allows remote attackers to execute arbitrary code via a high "trace level."...

CVE-2002-1037

Cross-site scripting vulnerability in Double Choco Latte DCL before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the 1 Ticket Find, 2 Priorities, 3 Severities, 4 Projects, 5 WO Find, 6 Departments and 7 Users features...

CVE-2002-1037

CVE-2002-1037 describes a cross-site scripting vulnerability in Double Choco Latte (DCL) prior to 20020706. The issue allows remote attackers to inject arbitrary HTML, including script, into web pages via seven features: Ticket# Find, Priorities, Severities, Projects, WO# Find, Departments, and U...

CVE-1999-1037

rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file...

CVE-1999-1037

CVE-1999-1037 affects SATAN 1.1.1; a local symlink attack allows a non-privileged user to overwrite arbitrary files via /tmp/rex.$$. This is described in the vulnerability record as rex.satan permits local file overwrite through a symlink race. The connected records confirm the affected product a...

CVE-2001-1037

Cisco SN 5420 Storage Router (versions 1.1(3) and earlier) is affected by CVE-2001-1037, where local users can access a developer’s shell without a password and execute certain restricted commands without being logged. The vulnerability arises in the device’s local shell access mechanism, enablin...

CVE-2000-1037

The CVE-2000-1037 issue affects Check Point Firewall-1 session agent versions 3.0 through 4.1. The root cause is that the service returns different error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames and perform brute-force passwor...