162 matches found
CVE-2003-1353
CVE-2003-1353 concerns multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b, allowing remote attackers to inject arbitrary script/HTML via the news field.
Debian DSA-1356-1 : linux-2.6 - several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1353 Ilja van Sprundel discovered that kernel...
DSA-1356-1 linux-2.6 - several vulnerabilities
Bulletin has no description...
RHEL 2.1 : kernel (RHSA-2007:0672)
Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 32-bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of th...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 32-bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of th...
RHEL 4 : kernel (RHSA-2007:0488)
Updated kernel packages that fix several security issues and bugs in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...
Important: kernel security and bug fix update
2.6.18-8.1.6.0.1.el5 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 -Add entropy module option to e1000 John Sobecki ORA 6045759 -Add entropy module option to bnx2 John Sobecki ORA 6045759 2.6.18.8-1.6.el5 - bluetooth close information leaks in setsockopt...
[USN-470-1] Linux kernel vulnerabilities
=========================================================== Ubuntu Security Notice USN-470-1 June 08, 2007 linux-source-2.6.20 vulnerabilities CVE-2007-1353, CVE-2007-2451, CVE-2007-2453 =========================================================== A security issue affects the following Ubuntu...
CVE-2007-1353
The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...
CVE-2007-1353
The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...
CVE-2007-1353
CVE-2007-1353 affects the Linux kernel’s Bluetooth stack (L2CAP and HCI) and can allow a context-dependent attacker to read kernel memory via the copy_from_user call accessing an uninitialized stack buffer in the setsockopt pathway. The vulnerability is present in kernel versions prior to 2.4.34....
CVE-2005-1353
The CVE-2005-1353 issue affects the forum.pl script, where remote attackers can cause the system to read arbitrary files by supplying a full pathname as an argument. This is the explicit vulnerability described in the CVE record and corroborated by NVD entries. The available data provide a CVSSv2...
CVE-2002-1353
Affected software : LocalWEB2000 HTTP server 2.1.0. Vulnerability : Passwords are stored in plain text under the web document root in the file users.lst, enabling remote access to passwords via a direct request to users.lst. Impact : Confidentiality of passwords is partially compromised as inform...
CVE-2004-1353
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control RBAC, allows local users to execute certain commands with additional privileges...
CVE-2004-1353
Technical details for CVE-2004-1353 are not publicly provided in the supplied documents. The records note an unknown LDAP vulnerability on Sun Solaris 8/9 with RBAC enabling local privilege escalation, but no concrete affected components, versions, or fixes are disclosed here. Monitor for updates.
CVE-2003-1353
Multiple cross-site scripting XSS vulnerabilities in Outreach Project Tool OPT 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field...
CVE-2002-1353
LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst...
CVE-2001-1353
Vulnerability (CVE-2001-1353) affects Ghostscript up to version 6.50, where the file operator can be exploited by a local user to read and write arbitrary files as the lp user, even when running with -dSAFER . The root cause is that the file operator integrity check does not prevent untrusted fil...