CVE-2009-1066

creationtimestamp| type| source ---|---|--- 2009-03-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8252...

Fedora Update for gallery2 FEDORA-2008-2650

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1520-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 16, 2008 http://www.debian.org/security/faq -...

Security fix for the ALT Linux 6 package smarty version 2.6.19-alt1

March 12, 2008 Vladimir V Kamarzin 2.6.19-alt1 - 2.6.19. Security fixes: + CVE-2008-1066 Smarty "regexreplace" Modifier Template Security Bypass...

CVE-2008-1066

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

CVE-2008-1066

The CVE-2008-1066 entry concerns Smarty (PHP template engine). The vulnerable component is the modifier.regex_replace.php plug‑in, which does not properly sanitize input related to the ASCII NUL character in a search string. This can allow a remote attacker to call arbitrary PHP functions via tem...

Debian Security Advisory DSA 1017-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1017-1. OpenVAS Vulnerability Test $Id: deb10171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1017-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1066-1 : phpbb2 - missing input sanitising

It was discovered that phpbb2, a web-based bulletin board, does insufficiently sanitise values passed to the 'Font Colour 3' setting, which might lead to the execution of injected code by admin users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2005-1066

Pine 4.62 and earlier (University of Washington Pine) is affected by a race condition in rpdump that allows local users to overwrite arbitrary files via a symlink attack, leading to Local File Write. Root cause: race window in rpdump during file operations. Impact: potential overwriting of sensit...

CVE-2003-1066

CVE-2003-1066 is a Solaris-specific vulnerability in the syslogd daemon (Solaris 2.6–9). The issue is a buffer overflow triggered by long UDP syslog packets, allowing remote attackers to cause a denial of service (syslogd crash) and potentially execute arbitrary code. Public details in the connec...

CVE-2004-1066

The cmdline pseudofiles in 1 procfs on FreeBSD 4.8 through 5.3, and 2 linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service panic or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2...

CVE-2004-1066

The cmdline pseudofiles in 1 procfs on FreeBSD 4.8 through 5.3, and 2 linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service panic or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2...

CVE-2004-1066

The CVE-2004-1066 issue affects FreeBSD’s procfs (procfs(5)) and linprocfs (linprocfs(5)) on FreeBSD 4.x/5.x. The vulnerability arises from dereferencing a processor argument vector without proper validation when reading /proc/curproc/cmdline (procfs) or /proc/self/cmdline (linprocfs). Impact is ...

[Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-04:17.procfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:17.procfs Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in procfs and linprocfs Category: core Module: sys Announced: 2004-12-01 Credit...

CVE-2001-1066

The CVE-2001-1066 issue affects the Netscape 6.0.1 installation script on Solaris (and related versions) where the installer creates a temporary, predictably named file in a world-writable /tmp directory without proper existence/ownership checks. This enables a local attacker to perform a symlink...

CVE-2003-1066

Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service syslogd crash and possibly execute arbitrary code via long syslog UDP packets...

CVE-2002-1066

Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a 1 RETR or 2 DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack...

CVE-2002-1066

The CVE-2002-1066 entry concerns Jana Server (POP3) versions 1.4.6 and earlier. The issue is a buffer overflow caused by a large message index value in the RETR or DELE commands, which exceeds array limits and enables remote denial of service and possible arbitrary code execution. Affected compon...

CVE-2002-1066

Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a 1 RETR or 2 DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack...

CVE-1999-1066

Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request...