Fedora Update for ruby FEDORA-2008-2458

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200501-16 (Konqueror, kde, kdelibs)

The remote host is missing updates announced in advisory GLSA 200501-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : ruby (ruby-5483)

This update of ruby fixes : - a possible information leakage CVE-2008-1145 - a directory traversal bug CVE-2008-1891 in WEBrick - various memory corruptions and integer overflows in array and string handling CVE-2008-2662, CVE-2008-2663, CVE-2008-2664, CVE-2008-2725, CVE-2008-2726, CVE-2008-2727,...

SuSE 10 Security Update : Ruby (ZYPP Patch Number 5484)

This update of ruby fixes : - a possible information leakage. CVE-2008-1145 - a directory traversal bug CVE-2008-1891 in WEBrick - various memory corruptions and integer overflows in array and string handling. CVE-2008-2662 / CVE-2008-2663 / CVE-2008-2664 / CVE-2008-2725 / CVE-2008-2726 /...

Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. Mac OS X 10.5.4 contains security fixes for multiple components. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid33281;...

Ruby WEBrick vulnerable to directory traversal

Overview Ruby WEBrick is vulnerable to a directory traversal on systems that support backslash \ path separators. This vulnerability may allow an attacker to access arbitrary files outside of the web server root directory. Description WEBrick is a Ruby library program to build HTTP servers...

Fedora 7 : ruby-1.8.6.114-1.fc7 (2008-2458)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

CVE-2008-1145

CVE-2008-1145 is a directory traversal vulnerability in WEBrick for Ruby. Affected: Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, on systems with backslash path separators or case-insensitive filenames. Exploitation via encoded backslashes ("..\" sequences) or filenames matc...

Debian Security Advisory DSA 1145-1 (freeradius)

The remote host is missing an update to freeradius announced via advisory DSA 1145-1. Several remote vulnerabilities have been discovered in freeradius, a high-performance RADIUS server, which may lead to SQL injection or denial of service. The Common Vulnerabilities and Exposures project...

CVE-2007-1145

Technical details for CVE-2007-1145 are not publicly available in the provided documents. No affected products, vectors, or remediation are specified here; monitor for updates as new information may appear.

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow (Denial of Service) (PoC)

/ FlashFXP V 3.4.0 build 1145 Buffer Overflow DoS There's a strange bug in FlashFXP. When sending a long PWD command with more than 5420 \ separated by at least one different char, it is possible to make the app unstable. It will first freeze during 45s consuming 100% resources, and then, if the...

Debian DSA-1145-1 : freeradius - several vulnerabilities

Several remote vulnerabilities have been discovered in freeradius, a high-performance RADIUS server, which may lead to SQL injection or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4745 A SQL injection vulnerability has been...

CVE-2006-1145

The CVE-2006-1145 entry concerns a format string vulnerability in the safe_cprintf function of acebot_cmds.c from Alien Arena 2006 Gold Edition 5.00. The flaw could allow remote attackers (potentially authenticated) to execute arbitrary code when the server sends crafted messages to clients; exac...

CVE-2003-1145

CVE-2003-1145 describes a Cross-site scripting (XSS) vulnerability in OpenAutoClassifieds 1.0, specifically in the friendmail.php script. The flaw allows remote attackers to inject arbitrary web script or HTML by manipulating the listing parameter. Public references and CVE records corroborate th...

RHEL 4 : kdelibs (RHSA-2005:065)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:065 advisory. The kdelibs packages include libraries for the K Desktop Environment. Two flaws were found in the sandbox environment used to run Java-applet...

CVE-2004-1145

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier 1 allow access to restricted Java classes via JavaScript and 2 do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary file...

CVE-2004-1145

CVE-2004-1145 affects Konqueror/KDE up to version 3.3.1 where the Java sandbox could be bypassed by JavaScript or Java applets, allowing read/write of arbitrary files. The issue resides in the sandbox restrictions for Java in Konqueror and the FTP kioslave handling in KDE, enabling remote code ex...

CVE-2004-1145

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier 1 allow access to restricted Java classes via JavaScript and 2 do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary file...

CVE-2003-1145

Cross-site scripting XSS vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter...

CVE-2001-1145

The CVE-2001-1145 entry concerns fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier. The issue allows the current working directory to be changed (via chdir) into a different directory than intended when the directory above the current directory is moved, wh...