OpenSIS 'modname' PHP Code Execution

This module exploits a PHP code execution vulnerability in OpenSIS versions 4.5 to 5.2 which allows any authenticated user to execute arbitrary PHP code under the context of the web-server user. The 'ajax.php' file calls 'eval' with user controlled data from the 'modname' parameter. Module Option...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : xorg vulnerability (USN-1349-1)

It was discovered that the X wrapper incorrectly checked certain console permissions when launched by unprivileged users. An attacker connected remotely could use this flaw to start X, bypassing the console permissions check. Note that Tenable Network Security has extracted the preceding...

CVE-2010-1349

Opera 10.10–10.50 contains a Content-Length header handling bug that can trigger a heap overflow, enabling remote code execution. Multiple connected advisories confirm a buffer/heap overflow vulnerability in Opera related to processing HTTP server replies and Content-Length values. Affected versi...

RHEL 4 : Satellite Server (RHSA-2008:0630)

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...

SLES9: Security update for mod_perl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: modperl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019089 within the SuS...

SuSE9 Security Update : perl-Convert-UUlib (YOU Patch Number 10044)

This update fixes a buffer overflow that could allow an attacker to execute arbitrary code. CVE-2005-1349 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41071;...

Mod_Perl Path_Info Remote Denial Of Service Vulnerability

According to its version number, the remote version of the Apache modperl module is prone to a remote denial-of-service vulnerability. Successful exploits may allow remote attackers to cause denial-of-service conditions on the webserver running the modperl module. OpenVAS Vulnerability Test $Id:...

CVE-2009-1349

Cross-site scripting XSS vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2009-1349

CVE-2009-1349 affects C2Net Stronghold 2.3. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the URI. The available documents confirm the affected product and the root cause (URI-based input, leading to script execution...

CVE-2009-1349

creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32929...

Fedora Update for mod_perl FEDORA-2007-576

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200705-04 (mod_perl)

The remote host is missing updates announced in advisory GLSA 200705-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Low: Red Hat Security Advisory: Red Hat Network Proxy Server security update

Red Hat Network Proxy Server version 5.1.1 is now available. This update includes a fix for a security issue in a Red Hat Network Proxy Server component. This update has been rated as having low security impact by the Red Hat Security Response Team. The Red Hat Network Proxy Server 5.1.1 release...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...

CVE-2008-1349

SQL injection vulnerability in viewcat.php of the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL via the cid parameter. Affected component: viewcat.php within the bamaGalerie module; root cause: input from cid not being safely hand...

CVE-2008-1349

creationtimestamp| type| source ---|---|--- 2008-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5244...

CVE-2003-1349

The CVE-2003-1349 entry describes a Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83. The issue occurs when a remote attacker uses a backslash-dot-dot sequence in the CWD command to traverse directories and list arbitrary paths. Documented impact includes partial confidentia...

Low: Red Hat Security Advisory: mod_perl security update

Updated modperl packages that fix a security issue are now available for Red Hat Application Stack. This update has been rated as having low security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter into the Apache web server, so that the Apache web server can...

mod_perl security update

CentOS Errata and Security Advisory CESA-2007:0486-01 Updated modperl packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter...

RHEL 2.1 : mod_perl (RHSA-2007:0486)

Updated modperl packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter into the Apache web server, so that the Apache HTTP...