Gentoo Security Advisory GLSA 200411-26 (GIMPS,SETI@home,ChessBrain)

The remote host is missing updates announced in advisory GLSA 200411-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1115

CVE-2008-1115 concerns Sun Solaris 8 where a vulnerability in directory-related functions allows a local user to trigger a denial of service (panic) through an unspecified sequence of system calls or commands. Some connected sources label the issue as command injection; others echo the unspecifie...

Debian: Security Advisory (DSA-1115)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1115

CVE-2007-1115 affects Opera 9 before 9.20. The vulnerability arises when a page with no explicit charset in Content-Type or META tag causes child frames to inherit the parent’s default charset, enabling cross-site scripting (XSS). Demonstrations used UTF-7 to show exploitation. Some related advis...

Debian DSA-1115-1 : gnupg2 - integer overflow

Evgeny Legerov discovered that gnupg, the GNU privacy guard, a free PGP replacement contains an integer overflow that can cause a segmentation fault and possibly overwrite memory via a large user ID string. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

CVE-2006-1115

CVE-2006-1115 affects nCipher HSM prior to 2.22.6. When generating a Diffie-Hellman public/private key pair without explicit DiscreteLogGroup parameters, the HSM may choose random parameters that could let an attacker recover the private key in less time than a brute-force search. The provided do...

Solaris 8 (sparc) : 117350-62

SunOS 5.8: kernel patch. Date this patch was last updated by Sun : Apr/21/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2005-1115

CVE-2005-1115 refers to multiple XSS flaws in Photo Album 2.0.53 module for phpBB. The vulnerabilities arise when user-supplied input is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML via the bsid parameter to the scripts album_cat.php and album_comment.php. ...

CVE-2003-1115

CVE-2003-1115 affects Nortel Networks Succession Communication Server 2000’s SIP-T implementation. The SIP stack allows remote attackers to trigger denial of service and potentially execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. The ava...

CVE-2004-1115

The init scripts in Search for Extraterrestrial Intelligence SETI project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs...

CVE-2004-1115

The CVE-2004-1115 entry corresponds to a real vulnerability in SETI project 3.08-r3 and earlier where init scripts execute user-owned programs with root privileges, enabling local privilege escalation by modifying those programs. Connected sources provide concrete details: Gentoo GLSA 200411-26 n...

CVE-2004-1115

The init scripts in Search for Extraterrestrial Intelligence SETI project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs...

CVE-2003-1115

The Session Initiation Protocol SIP implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suit...

CVE-2002-1115

Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the fid bug ID parameter to 1 bugupdateadvancedpage.php, 2 bugupdatepage.php, 3 viewbugadvancedpage.php, or 4 viewbugpage.php...

CVE-2002-1115

CVE-2002-1115 affects Mantis ≤ 0.17.4a; the issue is improper access control in bug viewing pages, allowing remote attackers to view private bugs by altering f_id on pages bug_update_advanced_page.php, bug_update_page.php, view_bug_advanced_page.php, or view_bug_page.php. Impact is exposure of pr...

CVE-2002-1115

Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the fid bug ID parameter to 1 bugupdateadvancedpage.php, 2 bugupdatepage.php, 3 viewbugadvancedpage.php, or 4 viewbugpage.php...

CVE-2001-1115

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

CVE-2001-1115

The CVE-2001-1115 issue affects SIX-webboard 2.01 and earlier where generate.cgi does not properly validate the content parameter, allowing a remote attacker to perform directory traversal and read arbitrary files on the server with the web server’s permissions. This is caused by directory traver...

CVE-1999-1115

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

CVE-1999-1115

The Connected PT Security entry PT-1990-1003 identifies this CVE as affecting HP Apollo Domain/OS versions sr10.2 through sr10.3 beta, tied to the /etc/suid_exec program and the Korn Shell (ksh). The description does not provide exact root cause details beyond the association with the /etc/suid_e...