Debian: Security Advisory (DSA-1646-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1646-1 : squid - array bounds check

A weakness has been discovered in squid, a caching proxy server. The flaw was introduced upstream in response to CVE-2007-6239, and announced by Debian in DSA-1482-1. The flaw involves an over-aggressive bounds check on an array resize, and could be exploited by an authorized client to induce a...

CVE-2008-1646

CVE-2008-1646 is an SQL injection vulnerability in the WordPress plugin WP-Download 1.2 , affecting the file wp-download.php via the dl_id parameter. The underlying issue is improper handling of input leading to arbitrary SQL execution by remote attackers. Public details in the connected document...

CVE-2008-1646

creationtimestamp| type| source ---|---|--- 2008-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5326...

CVE-2007-1646

Multiple cross-site scripting XSS vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the searchtext parameter to a /search, or the 2 message parameter to b /calendar or c /subscribe...

CVE-2007-1646

CVE-2007-1646 : Multiple cross-site scripting (XSS) vulnerabilities in SubHub 2.3.0. Attack surface includes (1) searchtext parameter to /search and (2) message parameter to /calendar or /subscribe. Remote attackers can inject arbitrary web script or HTML. The NVD entry reports base score 4.3 (Me...

Xedus directory traversal

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to directory traversal. An attacker could send specially crafted URL to view arbitrary files on the system. OpenVAS Vulnerability Test $Id: xedusdirtraversal.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Xedus...

CVE-2005-1646

Affected product: Fastream NETFile FTP/Web Server 7.4.6. Vulnerability: FXP support allows a PORT command with an IP address that may differ from the logged-in user’s IP, enabling FTP Bounce attacks. This can bypass firewall rules and cause a denial of service. Impact: Potential firewall traversa...

CVE-2002-1646

SSH Secure Shell for Servers versions 3.0.0–3.1.1 allow remote attackers to override AllowedAuthentications, permitting password or other less secure authentication schemes instead of those configured. This can enable unauthorized access via password-based authentication as described in multiple ...

CVE-2004-1646

Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2004-1646

CVE-2004-1646 affects Xedus Peer-to-Peer web server (Xedus 1.0). The OpenVAS/Nessus entries describe a directory-traversal vulnerability allowing an attacker to view arbitrary files by crafting a URL containing ..; documents do not provide exploitation status. Remediation cited in the OpenVAS/Nes...