FreeBSD : freetype -- multiple vulnerabilities (462e2d6c-8017-11e1-a571-bcaec565249c)

The Freetype project reports : Multiple vulnerabilities exist in freetype that can result in application crashes and remote code execution. Please review the details in each of the CVEs for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Ubuntu 10.04 LTS / 10.10 / 11.04 : exim4 vulnerability (USN-1135-1)

It was discovered that the Exim daemon did not correctly handle certain DKIM identities. A remote attacker could send specially crafted email to run arbitrary code as the Exim user. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Ubuntu Update for exim4 USN-1135-1

Ubuntu Update for Linux kernel vulnerabilities USN-1135-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11351.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for exim4 USN-1135-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2004-1135

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16719 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/wsftpserver503mkd.rb 2025-02-06 03:13:38+00:00| seen...

CVE-2010-1135

The CVE-2010-1135 issue affects Tiki Wiki CMS/Groupware 4.x prior to 4.2 . The root cause is the user_logout function failing to properly delete user login cookies , allowing a remote attacker to gain access via cookie reuse. Impact is authenticated access through cookie replay, with partial conf...

WS-FTP Server 5.03 MKD Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WS-FTP Serve...

CVE-2009-1135

CVE-2009-1135 affects Microsoft ISA Server 2006 (Gold/SP1) when Radius OTP is enabled. The vulnerability stems from ISA Server using HTTP-Basic authentication for Radius OTP-enabled requests, which can let a remote attacker impersonate a valid user and access published web resources behind the IS...

CVE-2008-1135

The CVE concerns OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7. The vulnerability arises because the login failure responses differ depending on whether a username is valid, enabling remote attackers to enumerate valid usernames. The documents do not provide explicit details on vulnerab...

Debian: Security Advisory (DSA-1135-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1135

The CVE-2007-1135 entry describes multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha. The flaws allow remote attackers to execute arbitrary SQL commands via the parameter (1) strid to index.php and the parameter (2) id[0] or other id array index to filecheck.php. Affected sof...

CVE-2006-6032

SPHPBlog (Simple PHP Blog) is affected by XSS in CVE-2006-6032. Concrete details from the connected data show vulnerable code paths in SPHPBlog where input is used without proper validation for two parameters: the action parameter in add_block.php and the entry parameter in index.php. The descrip...

Debian DSA-1135-1 : libtunepimp - buffer overflow

Kevin Kofler discovered several stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp, a MusicBrainz tagging library, which allows remote attackers to cause a denial of service or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Sql injection

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135...

CVE-2006-2189

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135...

CVE-2006-2189

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135...

CVE-2006-2189

The CVE-2006-2189 issue affects sBlog 0.7.2, where search.php’s keyword parameter is not properly sanitized, allowing remote attackers to inject and execute arbitrary SQL commands. The vulnerability can also enable path disclosure as noted, indicating potential broader disclosure implications. Th...

CVE-2006-1135

CVE-2006-1135 documents multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2. The affected component is the web application’s search functionality (search.php) and comments submission handling (comments_do.php). The root cause is insufficient input sanitization, allowing an attacker...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...