Debian Security Advisory DSA 1454-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 1454-1. OpenVAS Vulnerability Test $Id: deb14541.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1454-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1454-1 : freetype - integer overflow

Greg MacManus discovered an integer overflow in the font handling of libfreetype, a FreeType 2 font engine, which might lead to denial of service or possibly the execution of arbitrary code if a user is tricked into opening a malformed font. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

CVE-2003-1454

Affected software: Invision Board 1.0–1.1.1. Vulnerability: when a forum is password protected, the administrator password is stored in plaintext in a cookie, risking unauthorized access. Impact: potential remote access by attackers due to cookie exposure. Root cause: insecure handling of session...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3289)

This Update fixes numerous vulnerabilities in PHP. Most of them were made public during the 'Month of PHP Bugs'. The vulnerabilities potentially lead to crashes, information leaks or even execution of malicious code. CVE-2007-1380, CVE-2007-0988, CVE-2007-1375, CVE-2007-1454 CVE-2007-1453,...

CVE-2007-1454

ext/filter in PHP 5.2.0, when FILTERSANITIZESTRING is used with the FILTERFLAGSTRIPLOW flag, does not properly strip HTML tags, which allows remote attackers to conduct cross-site scripting XSS attacks via HTML with a '' character followed by certain whitespace characters, which passes one filter...

CVE-2007-1454

CVE-2007-1454 relates to PHP 5.2.0 ext/filter: when using FILTER_SANITIZE_STRING with FILTER_FLAG_STRIP_LOW, HTML tags aren’t fully stripped, enabling XSS via a tag-starting sequence like

CVE-2006-1454

CVE-2006-1454 affects Apple QuickTime before 7.1. It is a heap-based buffer overflow in QuickDraw PICT image format support, enabling remote code execution when a crafted image is opened. Remediation per sources: upgrade to QuickTime 7.1 (Mac/Windows).

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

freeradius security update

CentOS Errata and Security Advisory CESA-2005:524 Updated freeradius packages that fix a buffer overflow and possible SQL injection attacks in the sql module are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeRADIUS is a...

CVE-2005-1454

SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...

CVE-2005-1454

SQL injection vulnerability in the radiusxlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via 1 groupmembershipquery, 2 simulcountquery, or 3 simulverifyquery configuration entries...

CVE-2005-1454

CVE-2005-1454 is a SQL injection in the radius_xlat function of the FreeRADIUS SQL module affecting 1.0.2 and earlier. Remote authenticated users can inject via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries. CVSSv2 base score 7.5 (HIGH). Relate...

CVE-2001-1454

CVE-2001-1454 : Buffer overflow in MySQL before 3.23.33 allows remote execution of arbitrary code via a long DROP DATABASE request. Affected: MySQL up to 3.23.32. Impact per documents: remote code execution with arbitrary code. Remediation noted in public sources: upgrade to 3.23.33 or later. Oth...

CVE-2004-1454

Cisco IOS CVE-2004-1454 affects IOS trains based on 12.0S, 12.2, and 12.3 where OSPF is enabled. A malformed OSPF packet can be used by a remote attacker to cause a denial of service (device reload). Several sources corroborate that the vulnerability arises from OSPF packet handling and that the ...

CVE-2004-1454

Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First OSPF enabled, allows remote attackers to cause a denial of service device reload via a malformed OSPF packet...

CVE-2002-1454

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...

CVE-2002-1454

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...

CVE-2002-1454

MyWebServer 1.0.2 is affected by a path disclosure vulnerability: when requesting a non-existent directory, the error message reveals the absolute path to the web document root, exposing sensitive directory structure. This impacts confidentiality (partial). No remediation details or patch/version...

CVE-1999-1454

Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC Escape key...

CVE-1999-1454

The vulnerability CVE-1999-1454 affects Macromedia The Matrix screen saver on Windows 95 when the Password protected option is enabled. The root cause is that pressing the Escape key can bypass the password prompt, allowing attackers with physical access to unlock the system. The NVD entry lists ...