Debian: Security Advisory (DSA-1513-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : lighttpd-1.4.18-6.fc8 (2008-2278)

Tue Mar 4 2008 Matthias Saou 1.4.18-6 - Include patch for CVE-2008-0983 crash when low on file descriptors. - Include patch for CVE-2008-1111 cgi source disclosure. - Tue Feb 19 2008 Fedora Release Engineering - Autorebuild for GCC 4.3 - Wed Dec 5 2007 Release Engineering - Rebuild for deps - Wed...

Fedora 7 : lighttpd-1.4.18-3.fc7 (2008-2262)

Tue Mar 4 2008 Matthias Saou 1.4.18-3 - Include patch for CVE-2008-0983 crash when low on file descriptors. - Include patch for CVE-2008-1111 cgi source disclosure. - Tue Oct 16 2007 Matthias Saou 1.4.18-2 - Include modgeoip additional source, make it an optional sub-package. - Reorder...

[SECURITY] [DSA 1513-1] New lighttpd packages fix CGI source disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1513-1 [email protected] http://www.debian.org/security/ Steve Kemp March 06, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2008-1111

CVE-2008-1111 affects lighttpd 1.4.18 through the mod_cgi path. When a fork failure occurs, lighttpd may return the source code of the CGI script instead of a 500 error, potentially allowing remote attackers to obtain sensitive information (information disclosure). Connected documents indicate re...

Debian Security Advisory DSA 153-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 153-1. OpenVAS Vulnerability Test $Id: deb1531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 153-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1111-1 (kernel-source-2.6.8 et. al.)

The remote host is missing an update to kernel-source-2.6.8 et. al. announced via advisory DSA 1111-1. OpenVAS Vulnerability Test $Id: deb11111.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1111-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft...

Debian Security Advisory DSA 846-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 846-1. Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1111 Imran Ghory discovered a race...

Debian: Security Advisory (DSA-1111-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1111)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1111

CVE-2007-1111 affects ActiveCalendar 1.2.0 with multiple XSS vulnerabilities in data/ via the css parameter to nine PHP scripts (flatevents.php, js.php, mysqlevents.php, m_2.php, m_3.php, m_4.php, xmlevents.php, y_2.php, y_3.php). Root cause: improper handling of user-supplied css parameter leads...

CentOS 3 / 4 : cpio (CESA-2005:378)

An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...

CVE-2006-1111

CVE-2006-1111 affects Aztek Forum 4.0. The vulnerability arises from a vulnerability in index.php where a "/ " value in the msg parameter can trigger a MySQL error message that reveals usernames and passwords. The root cause is described as possibly due to a forced SQL error or SQL injection. The...

Ubuntu 4.10 / 5.04 : cpio vulnerabilities (USN-189-1)

Imran Ghory found a race condition in the handling of output files. While a file was unpacked with cpio, a local attacker with write permissions to the target directory could exploit this to change the permissions of arbitrary files of the cpio user. CAN-2005-1111 Imran Ghory discovered a path...

CVE-2005-4216

The Administration Service FMSAdmin.exe in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service application crash via a malformed request with a single character to port 1111...

CVE-2005-4216

The Administration Service FMSAdmin.exe in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service application crash via a malformed request with a single character to port 1111...

RHEL 2.1 : cpio (RHSA-2005:806)

An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...

cpio security update

CentOS Errata and Security Advisory CESA-2005:806-01 An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bu...

RHEL 4 : cpio (RHSA-2005:378)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:378 advisory. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local malicious user to modif...

Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)

A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...