openSUSE 10 Security Update : lighttpd (lighttpd-5107)

Remote attackers were able to crash lighttpd by opening a large number of connections CVE-2008-0983. - A bug in modcgi allowed remote attackers to read cgi source files CVE-2008-1111. - A bug in moduserdir allowed remote attackers to read arbitrary files CVE-2008-1270. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1521-1] New lighttpd packages fix arbitrary file disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1521-1 [email protected] http://www.debian.org/security/ Steve Kemp March 16, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2008-1270

moduserdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the nobody directory...

CVE-2008-1270

moduserdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the nobody directory...

CVE-2008-1270

moduserdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the nobody directory...

CVE-2008-1270

moduserdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the nobody directory...

CVE-2008-1270

lighttpd

CVE-2007-1270

CVE-2007-1270 involves a double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1. The root cause is a double free in a component that can lead to a crash (DoS), potential information leak, and possibly arbitrary code execution via unspecified vectors. Exploitation details are not provided ...

Debian DSA-1270-2 : openoffice.org - several vulnerabilities

Several security related problems have been discovered in OpenOffice.org, the free office suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0002 iDefense reported several integer overflow bugs in libwpd, a library for handling WordPerfect...

CVE-2006-1270

Multiple cross-site scripting (XSS) vulnerabilities affect zones.php in Inprotect 0.21, enabling remote attackers to inject arbitrary web script or HTML via the Name or Description fields. The underlying issue is an input handling flaw in zones.php, leading to client-side script execution if unes...

CVE-2003-1270

CVE-2003-1270 is a remote-denial-of-service vulnerability where an HTTP 1.41e server may be triggered by sending a long argument to aux.cgi, potentially causing a buffer overflow or MS-DOS device vulnerability. The connected documents confirm the issue exists and describe the impact as an unauthe...

CVE-2005-1270

The CVE-2005-1270 entry concerns Rootkit Hunter before 1.2.3-r1, where the check_update.sh and rkhunter scripts create temporary files with predictable names. This enables local users to overwrite arbitrary files via a symlink attack. The provided documents do not specify affected OS/Vendor versi...

CVE-2005-1270

The 1 checkupdate.sh and 2 rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-1270

CVE-2004-1270 affects CUPS up to 1.1.22. When lppasswd runs in environments where file descriptors 0, 1, 2 may not be open, it does not verify that passwd.new is different from STDERR, enabling a local attacker to influence output to passwd.new by triggering an error. Public references (Ubuntu US...

CVE-2002-1270

Mac OS X 10.2.2 allows local users to read files that only allow write access via the mapfd Mach system call...

CVE-2003-1270

AN HTTP 1.41e allows remote attackers to cause a denial of service borken pipe via an HTTP request to aux.cgi with a long argument, possibly triggering a buffer overflow or MS-DOS device vulnerability...

CVE-2001-1270

CVE-2001-1270 affects the PKZip console tool (pkzipc) 4.00 and earlier. The vulnerability is a directory traversal during archive extraction when using the -rec option, allowing an attacker to overwrite arbitrary files via a .. path in archived filenames. The available documents confirm the affec...

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip pkzipc 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec recursive option via a .. dot dot attack on the archived files...

CVE-1999-1270

KMail in KDE 1.0 exposes a PGP passphrase as a command-line argument to other programs. This allows local users to view the passphrase via process listing (e.g., ps) and potentially compromise the PGP keys of other users. Affected component: KMail (KDE 1.0); root cause: passphrase passed as comma...

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip pkzipc 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec recursive option via a .. dot dot attack on the archived files...