cups security update

cups 1.2.4-11.14:.6 - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing, bug 438117. - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. 1.2.4-11.14:.5 - Applied patch to prevent heap-based buffer overflow in CUPS helper program bug 436153, CVE-2008-0047, STR 2729...

CVE-2003-1373

The provided documents describe CVE-2003-1373 as a vulnerability in PhpBB versions 1.4.0 through 1.4.4. The issue is a directory traversal that lets remote attackers read and include arbitrary files via dot-dot sequences followed by NULL (%00) characters in CGI parameters, demonstrated for the la...

Debian DSA-1373-2 : ktorrent - directory traversal

It was discovered that ktorrent, a BitTorrent client for KDE, was vulnerable to a directory traversal bug which potentially allowed remote users to overwrite arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Mercury IMAP data continuation buffer overflow

Added: 03/22/2007 CVE: CVE-2007-1373 OSVDB: 33883 Background Mercury Mail Transport System is an e-mail server product for Windows and NetWare. Problem A buffer overflow vulnerability in the Mercury IMAP service when processing data continuation specifiers allows remote attackers to execute...

CVE-2007-1373

CVE-2007-1373 concerns a stack-based buffer overflow in Mercury/32 (Mercury Mail Transport System) up to version 4.01b, exploitable via a specially crafted LOGIN command in the IMAPD. The vulnerability permits remote code execution and is accessible over the network with no authentication require...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

SHOUTcast filename format string vulnerability

Added: 05/17/2006 CVE: CVE-2004-1373 BID: 12096 OSVDB: 12585 Background SHOUTcast is a streaming audio server based on Winamp. Problem A format string vulnerability in SHOUTcast allows remote attackers to execute commands by requesting a MP3 filename containing format string characters such as %n...

CVE-2006-1373

CVE-2006-1373 affects PHP Live! 3.0, specifically status_image.php, where the base_url parameter is not properly sanitized, enabling cross-site scripting (XSS). The underlying issue is insufficient input sanitization, allowing an attacker to inject arbitrary script to run in a user’s browser and ...

CVE-2005-1373

Dream4 Koobi CMS 4.2.3 contains SQL injection flaws in index.php exploitable via the q and p parameters, allowing remote arbitrary SQL execution. Root cause: input validation flaw leading to SQL injection; no remediation details provided in the connected documents.

CVE-2004-1373

CVE-2004-1373 describes a format-string vulnerability in SHOUTcast 1.9.4 where a specially crafted filename in a URL can cause a crash or remote code execution. Multiple public sources (Metasploit module, Exploit-DB, and vendor/OpenVAS advisories) corroborate remote code execution and denial of s...

CVE-2004-1373

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service application crash and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file...

CVE-2004-1373

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service application crash and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file...

Immunity Canvas: SHOUTCAST_FS

Name| shoutcastfs ---|--- CVE| CVE-2004-1373 Exploit Pack| CANVAS Description| shoutcastfs Notes| References: http://www.securityfocus.com/bid/12096 CVE Name: CVE-2004-1373 VENDOR: Nullsoft Note: Date public: 12/23/2004 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1373 CVSS...

CVE-2002-1373

Signed integer vulnerability in the COMTABLEDUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service crash or hang in mysqld by causing large negative integers to be provided to a memcpy call...

CVE-2002-1373

CVE-2002-1373 is a signed-integer vulnerability in the COM_TABLE_DUMP package of MySQL 3.x to 3.23.53a, allowing remote attackers to cause a denial of service (crash/hang) by supplying large negative integers to a memcpy call. Public fixes upgrade to MySQL 3.23.54a (and related 3.23.54a/4.x fixes...

CVE-2003-1373

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. dot dot sequences followed by NULL %00 characters in CGI parameters, as demonstrated using the lang parameter in prefs.php...

CVE-2001-1373

Vulnerability (CVE-2001-1373) affects Zone Labs ZoneAlarm 2.6 and earlier, and ZoneAlarm Pro 2.6 and 2.4, where the MailSafe component does not block prohibited file types with long file names. Root cause: the filter fails to enforce type/name restrictions for attachments, enabling remote attacke...

CVE-2002-1373

Signed integer vulnerability in the COMTABLEDUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service crash or hang in mysqld by causing large negative integers to be provided to a memcpy call...