277 matches found
Gentoo Security Advisory GLSA 200803-29 (viewvc)
The remote host is missing updates announced in advisory GLSA 200803-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE 10 Security Update : viewvc (viewvc-5358)
This update of viewvc fixes multiple vulnerabilities. - CVE-2008-1290: list CVS or SVN commits on 'all-forbidden' files - CVE-2008-1291: directly access hidden CVSROOT folders - CVE-2008-1292: expose restricted content via the revision view, the log history, or the diff view %NASLMINLEVEL 70300 C...
CVE-2008-1292
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading 1 forbidden pathnames in the revision view, 2 log history that can only be reached by traversing a forbidden object, or 3...
CVE-2008-1292
CVE-2008-1292 affects ViewVC prior to 1.0.5, where revision metadata could be read without proper access checks. The vulnerability allows remote attackers to disclose sensitive information by reading: (1) forbidden pathnames in the revision view, (2) log history accessible only via traversing a f...
[ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200803-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2007-1292
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almo...
CVE-2007-1292
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almo...
CVE-2006-1292
CVE-2006-1292 is a directory-traversal vulnerability in PHP iCalendar 2.21 and earlier. An attacker can cause local file inclusion and remote code execution by manipulating cookies phpicalendar[cookie_language] and phpicalendar[cookie_style] (with a NUL/%00) so that PHP sequences injected into an...
CVE-2003-1292
CVE-2003-1292 concerns ashNews 0.83. The vulnerability is a PHP remote file inclusion (RFI) where an attacker can use a URL in the pathtoashnews parameter to ashnews.php and ashheadlines.php to include and execute remote files. Affected software: ashNews 0.83. The CVSS details from NVD indicate a...
CVE-2004-1292
Buffer overflow in the parseemelody function in parseemelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code via a crafted eMelody file...
CVE-2004-1292
CVE-2004-1292 affects ringtonetools. A buffer overflow in the parse_emelody function (parse_emelody.c) could allow a remote attacker to execute arbitrary code by presenting a crafted eMelody file. Public records identify ringtonetools 2.22 as affected; Gentoo GLSA 200503-18 advises upgrading to t...
CVE-2003-1292
PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to 1 ashnews.php and 2 ashheadlines.php...
CVE-2002-1261
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1292. Reason: This candidate is a reservation duplicate of CVE-2002-1292. Notes: All CVE users should reference CVE-2002-1292 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2001-1292
CVE-2001-1292 affects Sambar Telnet Proxy/Server. The vulnerability allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long password. This is documented across NVD/CVE records as the affected product and impact. No remediation details are provided in...
CVE-1999-1292
The CVE-1999-1292 entry describes a buffer overflow in the web administration feature of Kolban Webcam32 versions up to 4.8.3 and earlier. The underlying issue is a buffer overflow in the web admin interface that allows remote attackers to execute arbitrary commands by supplying a long URL. No ex...