Debian: Security Advisory (DSA-1370-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 047-1 (various kernel packages)

The remote host is missing an update to various kernel packages announced via advisory DSA 047-1. OpenVAS Vulnerability Test $Id: deb0471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 047-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 202-2 (im)

The remote host is missing an update to im announced via advisory DSA 202-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1395-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1370-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1370-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1370-1. OpenVAS Vulnerability Test $Id: deb13701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1370-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1395-1 : xen-utils - insecure temporary files

Steve Kemp from the Debian Security Audit project discovered that xen-utils, a collection of XEN administrative tools, used temporary files insecurely within the xenmon tool allowing local users to truncate arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2003-1395

Technical details about CVE-2003-1395 are not publicly available in the provided documents. Monitor for updates from official advisories.

[SECURITY] [DSA 1370-2] New phpmyadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1370-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 10th, 2007 http://www.debian.org/security/faq -...

CVE-2007-1395

Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting XSS attacks by injecting arbitrary JavaScript or HTML in a 1 db or 2 table parameter value followed by an uppercase end tag, which bypasses the protection...

CVE-2007-1395

CVE-2007-1395 is an incomplete blacklist XSS vulnerability in phpMyAdmin 2.8.0–2.9.2, present in index.php where a (1) db or (2) table parameter value can inject arbitrary JavaScript/HTML, followed by an uppercase tag, bypassing lowercase filters. Multiple connected sources confirm this issue a...

XSS and Path Disclosure vulnerabilities

PMASA-2007-2 Announcement-ID: PMASA-2007-2 Date: 2007-01-16 Summary XSS and Path Disclosure vulnerabilities Description We received an advisory from Laurent Gaffié and we wish to thank him for his work. It was possible to trigger these attacks on dbcreate.php and index.php. Severity We consider...

CVE-2006-1395

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-1395

The CVE-2006-1395 entry concerns a SQL injection vulnerability in mb.cgi of the Cholod MySQL Based Message Board. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action (possibly via the username parameter), with CVSS considerations ind...

CVE-2005-1395

CVE-2005-1395 affects Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier. The vulnerability is a buffer overflow that can allow local users to gain privileges when a long environment variable (XAPPLRESLANGPATH or XAPPLRESDIR) is set or via a long command line argument. The Red Hat and NVD entries confirm...

CVE-2004-1395

The CVE-2004-1395 entry concerns the Lithtech engine as used in several games (Contract Jack, No One Lives Forever 2, Tron 2.0, F.E.A.R., and potentially others). A remote attacker can trigger a denial of service by sending a UDP packet that causes recvfrom to produce a return code which makes th...

CVE-2004-1395

The Lithtech engine, as used in 1 Contract Jack 1.1 and earlier, 2 No one lives forever 2 1.3 and earlier, 3 Tron 2.0 1.042 and earlier, 4 F.E.A.R. First Encounter Assault and Recon, and possibly other games, allows remote attackers to cause a denial of service connection refused via a UDP packet...

CVE-2003-1395

Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a response to the ad server...

CVE-2002-1395

Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...

CVE-2002-1395

Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...