119 matches found
Debian: Security Advisory (DSA-1532-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1532-1 : xulrunner - several vulnerabilities
This shares a lot of text with dsa-1534.wml, dsa-1535.wml, dsa-1574.wml Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4879 Peter Broderse...
CVE-2008-1240
LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before sending them to the Java plugin, which allows remote attackers to access arbitrary ports on the local machine. NOTE: this is closely related to CVE-2008-1195...
CVE-2008-1240
Technical details for CVE-2008-1240 are not present in the connected documents. The initial description notes a jar URI content-origin parsing issue in LiveConnect affecting Firefox/SeaMonkey, but there are no accompanying technical specifics (affected product versions, root cause, or fixes) in t...
CVE-2006-7212
Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240...
CVE-2007-1240
CVE-2007-1240 involves multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) searchkey to index.php, and (2) sn or (3) ri to modules/htmlframechat/index.php. The d...
Debian DSA-1240-1 : links2 - insufficient escaping
Teemu Salmela discovered that the links2 character mode web browser performs insufficient sanitising of smb:// URIs, which might lead to the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2000-1240
The vulnerability CVE-2000-1240 affects AnyPortal(php) via siteman.php3, where any version before 22 Apr 2000 is susceptible. The issue allows remote attackers to obtain sensitive information by unspecified attack vectors that reveal the absolute path. The provided documents do not include concre...
Buffer overflow
Firebird 1.5.2.4731 installs 1 fblockmgr, 2 gdsdrop, and 3 fbinetserver with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities...
CVE-2006-1240
Buffer overflow in inetserver.cpp in 1 fbinetserver and 2 fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument...
CVE-2006-1240
CVE-2006-1240 documents a buffer overflow in Firebird 1.5.2.4731, specifically in inet_server.cpp for (1) fb_inet_server and (2) fbserver. The overflow is triggerable by a long value of the -p argument and could allow local users to gain privileges. The vulnerability is described by CVE-2006-1240...
CVE-2006-1241
Firebird 1.5.2.4731 installs 1 fblockmgr, 2 gdsdrop, and 3 fbinetserver with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities...
CVE-2003-1240
CVE-2003-1240 affects CuteNews 0.88. The vulnerability is a PHP remote file inclusion due to unsanitized input in the cutepath parameter used by shownews.php, search.php, and comments.php, enabling remote attackers to execute arbitrary PHP code on the server. The root cause is failure to sanitize...
Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Document ID: 68034 Revision 1.0 For Public Release 2005 November 02 1500 UTC GMT -...
CVE-2005-1240
The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...
CVE-2004-1240
This CVE entry is rejected and not used.
CVE-2001-1240
The CVE-2001-1240 entry concerns Engarde Secure Linux 1.0.1 where the default sudo configuration allows any user in the admin group to execute certain commands that could yield full root access. The documents confirm the affected component is the sudo configuration on Engarde Secure Linux 1.0.1 a...
CVE-1999-1240
CVE-1999-1240 describes a buffer overflow in the cddbd CD database server that can be triggered by a long log message, allowing remote attackers to execute arbitrary commands. The vulnerability is triggered through input handling in the server component responsible for logging; the exact vulnerab...