139 matches found
CVE-2008-1392
The CVE-2008-1392 issue affects VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1, where the guest OS console is reachable via anonymous VIX API calls. Impact is explicitly stated as unknown in the sources. Remediation noted in VMSA-2008-0005: the vulne...
Debian Security Advisory DSA 047-1 (various kernel packages)
The remote host is missing an update to various kernel packages announced via advisory DSA 047-1. OpenVAS Vulnerability Test $Id: deb0471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 047-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2003-1392
CryptoBuddy 1.0 and 1.2 are affected by a cryptographic weakness: the application does not use the user-supplied passphrase to encrypt data, potentially allowing local users to decrypt data with their own passphrase. The underlying cause is improper use of the passphrase in encryption, leading to...
CVE-2007-1392
The CVE-2007-1392 entry affects netForo! 0.1g and is caused by a directory traversal flaw in the down.php script, allowing remote attackers to read arbitrary files via a .. in the file_to_download parameter. This is supported by multiple sources (NVD/NVD-derived entries, CVE listing, and security...
CentOS 4 : PHP (CESA-2005:406)
Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...
CVE-2006-1392
The CVE pertains to Pubcookie’s login server (index.cgi) containing multiple non‑persistent XSS flaws due to insufficient input sanitization. Affected versions are Pubcookie login server 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a. An attacker can inject arbitrary script/HTML vi...
CVE-2005-1392
The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script...
CVE-2005-1392
CVE-2005-1392 : In phpMyAdmin 2.6.2, the SQL install script is created with world-readable permissions, enabling a local attacker to read the initial pma password from the script. Affected software: phpMyAdmin 2.6.2 (initial password stored for the pma user). Impact: local confidentiality breach ...
CVE-2004-1392
PHP 4.0 with cURL functions allows remote attackers to bypass the openbasedir setting and read arbitrary files via a file: URL argument to the curlinit function...
CVE-2004-1392
PHP 4.0 with cURL functions allows remote attackers to bypass the openbasedir setting and read arbitrary files via a file: URL argument to the curlinit function...
CVE-2002-1392
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges...
CVE-2002-1392
The CVE-2002-1392 issue affects mgetty before 1.1.29, where the faxspool directory is world-writable, allowing local users to modify fax transmission privileges. Public advisories (e.g., RHSA-2003:008 and RHSA-2003:036) document a fixed upgrade path to mgetty 1.1.30 to resolve both the buffer-ove...
CVE-2002-1392
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges...
CVE-2002-1392
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges...
CVE-2001-1392
The Linux kernel before 2.2.19 does not have unregister calls for 1 CPUID and 2 MSR drivers, which could cause a DoS crash by unloading and reloading the drivers...
CVE-2001-1392
The supplied documents confirm CVE-2001-1392 affects the Linux kernel prior to 2.2.19, due to missing unregister calls for CPUID and MSR drivers, which could crash the system on unloading/loading (local DoS). Remediation is to upgrade to kernel 2.2.19 or later (as noted in Mandrake/Debian/NVD ref...
CVE-1999-1392
The connected PT-1990-1007 entry confirms a local privilege escalation in NeXT 1.0a–1.0 due to the restore0.9 installation script. Affected component: restore0.9 installer; root privileges gained through the installation process. No public exploit details are provided. Remediation status: PTSecur...