90 matches found
[ MDVSA-2008:083 ] - Updated audit packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:083 http://www.mandriva.com/security/ Package : audit Date : April 9, 2008 Affected: 2008.0, 2008.1 Problem Description: Joe Nall reported a stack-based buffer overflow in Audit's log handling that could all...
CVE-2008-1628
CVE-2008-1628 describes a stack-based buffer overflow in audit_log_user_command() in lib/audit_logging.c of Linux Audit before 1.7. Exploitation could allow arbitrary code execution (per multiple advisories). Affected component: audit subsystem (linux-audit utilities). Root cause: processing over...
CVE-2007-1628
CVE-2007-1628 involves multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier. When register_globals is enabled, an attacker can execute arbitrary PHP code by supplying a URL in the SPL_CFG[dirroot] parameter to various files (e.g., service.alert.inc.p...
CVE-2006-1628
Affected software : Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01. Vulnerability : an authentication flaw where accounts marked as OBSOLETE can still authenticate and perform privileged actions. Root cause : mismatch in account state vs. authentication/authorization in the authen...
WebAPP Apage.CGI remote command execution flaw
Due to a lack of user input validation, an attacker can exploit the OpenVAS Vulnerability Test $Id: webappapagecmdexe.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: WebAPP Apage.CGI remote command execution flaw Authors: David Maciejak Copyright: Copyright C 2005 David Maciejak This program...
CVE-2005-1628
WebAPP apage.cgi remote command execution (CVE-2005-1628) affects WebAPP versions 0.9.9.2.1 and earlier. The flaw is due to lack of input validation in the f parameter, allowing an attacker to execute arbitrary shell commands on the remote host with the web server’s privileges. Affected component...
CVE-2002-1628
The CVE-2002-1628 entry describes a directory traversal in Mike Spice Mike’s Vote CGI (vote.cgi) prior to version 1.3, where an attacker can write arbitrary files via .. sequences in the type parameter. Affected component: vote.cgi; root cause: improper sanitization of the type parameter enabling...
CVE-2004-1628
Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code...
CVE-2004-1628
CVE-2004-1628 affects the rssh project (before 2.2.2). The vulnerability is a format string issue in log.c that can allow remote authenticated users to execute arbitrary code. Exploitation details are not provided in the connected documents beyond the CVE description, but multiple sources (Gentoo...
