Debian Security Advisory DSA 713-1 (junkbuster)

The remote host is missing an update to junkbuster announced via advisory DSA 713-1. OpenVAS Vulnerability Test $Id: deb7131.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 713-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-713-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1109-1 (rssh)

The remote host is missing an update to rssh announced via advisory DSA 1109-1. Russ Allbery discovered that rssh, a restricted shell, performs insufficient checking of incoming commands, which might lead to a bypass of access restrictions. OpenVAS Vulnerability Test $Id: deb11091.nasl 6616...

CVE-2007-1109

CVE-2007-1109 describes multiple cross-site scripting (XSS) vulnerabilities in PhpwebGallery 1.4.1. The published description identifies vectors in Register.php (fields: login, mail_address) and in Search.php (fields: search_author, mode, start_year, end_year, date_type). A related entry (CVE-200...

CVE-2007-1109

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

CVE-2006-1109

CVE-2006-1109: SQL injection vulnerability in index.asp of Total Ecommerce 1.0 via the id parameter allows remote arbitrary SQL execution. Root cause described as an injection vulnerability; exploitation details are not provided in the connected documents. No remediation steps, affected version i...

CVE-2005-1109

CVE-2005-1109 affects JunkBuster (before 2.0.2-r3): the URL filtering fails, allowing remote attackers to cause an application crash (DoS) and possibly execute arbitrary code via heap corruption. Remediation: upgrade to 2.0.2-r3 or later, per public descriptions. Exploitation details are not prov...

CVE-2003-1109

The Session Initiation Protocol SIP implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages...

CVE-2004-1109

The CVE-2004-1109 entry concerns the FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier. A crafted TCP, UDP, or ICMP packet with a zero-length IP Option field can trigger an infinite loop, causing CPU consumption and a system freeze (DoS) on vulnerable systems. Affected component: FWDR...

Debian DSA-036-1 : Midnight Commander - arbitrary program execution

It has been reported that a local user could tweak Midnight Commander of another user into executing an arbitrary program under the user id of the person running Midnight Commander. This behaviour has been fixed by Andrew V. Samoilov. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2002-1109

securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service CPU consumption via a malformed TAR file, possibly via an incorrect file size parameter...

Cisco SIP Crafted INVITE Message Handling DoS (CSCdz39284, CSCdz41124)

It is possible to make the remote IOS crash when sending it malformed SIP packets. These vulnerabilities are documented as CISCO bug id CSCdz39284 and CSCdz41124. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11380; scriptversion"1.21"; scriptcveid"CVE-2003-1109";...

CVE-2002-1109

securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service CPU consumption via a malformed TAR file, possibly via an incorrect file size parameter...

CVE-2001-1109

EFTP 2.0.7.337 is affected by a directory traversal vulnerability that allows remote authenticated users to reveal directory contents by injecting dot-dot sequences in LIST, QUOTE SIZE, and QUOTE MDTM commands. Multiple security tools summarize this as an information-disclosure flaw (installation...

CVE-1999-1109

The vulnerability CVE-1999-1109 affects Sendmail 8.x prior to 8.10.0. It allows remote attackers to cause a denial of service by sending a sequence of ETRN commands, then disconnecting; the server reportedly continues to process the commands after the connection is terminated. The available docum...

CVE-2001-1109

Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. dot dot in the 1 LIST, 2 QUOTE SIZE, and 3 QUOTE MDTM commands...

CVE-2000-1109

CVE-2000-1109 affects Midnight Commander (mc) versions up to 4.x, specifically 4.5.51 and earlier. The issue arises when mc processes malformed directory names during directory opening, allowing a local user to gain privileges by creating directories that contain special characters followed by co...

CVE-2000-1109

Midnight Commander mc 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed...

CVE-1999-1109

Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated...