CentOS Update for pcre CESA-2007:1063 centos3 x86_64

Check for the Version of pcre OpenVAS Vulnerability Test CentOS Update for pcre CESA-2007:1063 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2008-1063

CVE-2008-1063 : A cross-site scripting (XSS) vulnerability in the XM-Memberstats module for XOOPS, exploitable via the sortby parameter in index.php. The affected component is the XM-Memberstats module integrated with XOOPS; the underlying cause is unsanitized input in sortby, enabling remote att...

Debian Security Advisory DSA 1063-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 1063-1. It was discovered that the Avatar upload feature of FUD Forum, a component of the web based groupware system phpgroupware, does not sufficiently validate uploaded files, which might lead to the execution of...

Debian Security Advisory DSA 999-1 (lurker)

The remote host is missing an update to lurker announced via advisory DSA 999-1. Several security related problems have been discovered in lurker, an archive tool for mailing lists with integrated search engine. The Common Vulnerability and Exposures project identifies the following problems:...

Debian: Security Advisory (DSA-999-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command injection

The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...

Debian DSA-1063-1 : phpgroupware - missing input sanitising

It was discovered that the Avatar upload feature of FUD Forum, a component of the web-based groupware system phpgroupware, does not sufficiently validate uploaded files, which might lead to the execution of injected web script code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-999-1 : lurker - several vulnerabilities

Several security related problems have been discovered in lurker, an archive tool for mailing lists with integrated search engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1062 Lurker's mechanism for specifying configuration files was...

CVE-2006-1063

CVE-2006-1063 affects Lurker 2.0 and earlier. A remote attacker can create or overwrite files in any writable directory named “mbox” due to the vulnerability in Lurker’s handling of such directories. Debian security advisories (DSA-999-1) fix this issue by upgrading lurker to version 1.2-5sarge1 ...

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

USN-99-1: PHP4 vulnerabilities

Stefano Di Paola discovered integer overflows in PHP's pack and unpack functions. A malicious PHP script could exploit these to break out of safe mode and execute arbitrary code with the privileges of the PHP interpreter. CAN-2004-1018 Note: The second part of CAN-2004-1018 buffer overflow in the...

CVE-2003-1063

The CVE-2003-1063 entry concerns Solaris 2.6/7 cachefs patches (105693-13, 108800-02, 105694-13, 108801-02) that overwrite inetd.conf. This may silently reenable services and allow remote attackers to bypass the intended security policy. Affected component: cachefs daemon on Solaris; root cause: ...

CVE-2004-1063

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safemodeexecdir restrictions and execute commands outside of the intended safemodeexecdir via shell metacharacters in the current directory name. NOTE: this issue was...

CVE-2004-1063

CVE-2004-1063 affects PHP 4.x up to 4.3.9 and PHP 5.x up to 5.0.2 when running in safe mode on multithreaded Unix webservers. It allows local users to bypass safe_mode_exec_dir restrictions and run commands outside the intended directory by using shell metacharacters in the current directory name...

CVE-2003-1063

The patches 1 105693-13, 2 108800-02, 3 105694-13, and 4 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy...

CVE-2002-1063

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

CVE-2002-1063

CVE-2002-1063 affects Jana Server 2.x (up to 2.2.1) and 1.4.6 and earlier. The vulnerability allows remote attackers to cause a denial of service by issuing a large number of FTP PASV requests, leading to resource exhaustion and exhaustion of available FTP ports. The available connected documents...

CVE-2002-1063

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service resource exhaustion via a large number of FTP PASV requests, which consumes all available FTP ports...

CVE-2001-1063

CVE-2001-1063 describes a local privilege-elevation in Caldera OpenUnix 8.0.0 and UnixWare 7 via a buffer overflow in the uidadmin utility. An overly long -S (scheme) command line argument can overflow a buffer, allowing a local user to gain root privileges. The vulnerability affects the uidadmin...

CVE-1999-1063

The CVE-1999-1063 entry concerns the CDomain whois_raw.cgi CGI script, where the fqdn parameter accepts shell metacharacters, enabling remote attackers to execute arbitrary commands. This is evidenced by the core description and corroborated by the Nessus NASL entry for CDomainFree’s whois_raw.cg...