RHEL 5 : kernel (RHSA-2009:1222)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1222 advisory. - kernel: uninit op in SOCKOPSWRAP leads to privesc CVE-2009-2692 - kernel: udp socket NULL ptr dereference CVE-2009-2698 Note that Nessus h...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2009-1222

CVE-2009-1222 concerns a directory traversal / local file inclusion vulnerability in webEdition CMS 6.0.0.4 and earlier. The flaw is triggered when the WE_LANGUAGE parameter is tainted and the environment has register_globals enabled with magic_quotes_gpc disabled, allowing remote attackers to in...

CVE-2009-1222

Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the WELANGUAGE parameter...

CVE-2009-1222

creationtimestamp| type| source ---|---|--- 2009-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8328...

CVE-2008-1222

CVE-2008-1222 is an XSS in Dokeos 1.8.4 before SP3. Remote attackers can inject arbitrary script/HTML via unspecified vectors. The connected sources confirm the affected product and vulnerability type; no detailed root cause, exact vectors, or patch specifics are provided in the documents. No exp...

Debian Security Advisory DSA 1222-1 (proftpd)

The remote host is missing an update to proftpd announced via advisory DSA 1222-1. Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the...

mysql security update

CentOS Errata and Security Advisory CESA-2007:1222-001 Updated mysql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user,...

CVE-2007-1222

Vulnerability: Parallels Desktop for Mac before 20070216 allows a guest OS user to affect the host by exposing the entire host filesystem via the .psf share. Root cause: the Drag and Drop mechanism shares the host filesystem with the guest, enabling write access to host files. Impact: local guest...

CVE-2006-1222

Multiple cross-site scripting XSS vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the 1 memo box title, 2 user email, and 3 homepage fields...

CVE-2006-1222

The CVE-2006-1222 entry concerns zeroboard 4.1 pl7 with multiple cross-site scripting (XSS) vulnerabilities. The affected component is the web interface, where an attacker can craft input in the memo box title, user email, or homepage fields to inject arbitrary web script or HTML. The NVD entry l...

CVE-2003-1222

BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service JMS provider, echoes the password for the foreign provider to the console and stores it in cleartext in config.xml, which could allow attackers to obtain the password...

CVE-2003-1222

CVE-2003-1222 affects BEA WebLogic Express/Server 8.0–8.1 SP1 when using a foreign JMS provider. The underlying issue is that the system echoes the foreign provider password to the console and stores it in cleartext in config.xml, enabling an attacker to obtain the password. The description does ...

CVE-2005-1222

catforgen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the addirect parameter to reference catforgen.php, then including the code in the mforracine parameter, which is then written to catforgen.php...

CVE-2005-1222

CVE-2005-1222 : Netref cat_for_gen.php remote PHP script injection vulnerability in Annuaire Netref 4.2. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying PHP code via ad_direct and including it through m_for_racine, which is then written into cat_for_gen.php...

CVE-2000-1222

CVE-2000-1222 affects AIX sysback prior to 4.2.1.13. The vulnerability stems from using a relative path to locate and execute the hostname program, allowing local users to escalate privileges by altering the PATH to point to a malicious hostname executable. The CVSSv2 metrics indicate a base scor...

CVE-2004-1222

weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter...

CVE-2004-1222

Summary: CVE-2004-1222 affects weblibs.pl in WebLibs 1.0, where the TextFile parameter can be abused with shell metacharacters to execute arbitrary commands on the remote system. The vulnerability is caused by improper handling of input in weblibs.pl, leading to remote command execution with high...

CVE-2004-1222

weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter...

CVE-2002-1222

The CVE-2002-1222 entry describes a vulnerability in Cisco Catalyst switches running CatOS 5.4–7.3 where the embedded HTTP server is vulnerable to a buffer overflow. An unauthenticated remote attacker can trigger a denial of service (reset/reboot) by sending a long HTTP request, as indicated by t...