93 matches found
[USN-649-1] OpenSSH vulnerabilities
=========================================================== Ubuntu Security Notice USN-649-1 October 01, 2008 openssh vulnerabilities CVE-2008-1657, CVE-2008-4109 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...
USN-649-1: OpenSSH vulnerabilities
It was discovered that the ForceCommand directive could be bypassed. If a local user created a malicious /.ssh/rc file, they could execute arbitrary commands as their user id. This only affected Ubuntu 7.10. CVE-2008-1657 USN-355-1 fixed vulnerabilities in OpenSSH. It was discovered that the fixe...
Gentoo Security Advisory GLSA 200804-03 (openssh)
The remote host is missing updates announced in advisory GLSA 200804-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200804-03 (openssh)
The remote host is missing updates announced in advisory GLSA 200804-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE 10 Security Update : openssh (openssh-5149)
A flaw in the X forwarding code of openssh allowed malicious users to steal the X access credentials of other users CVE-2008-1483. Due to another flaw users could bypass the option 'ForceCommand' CVE-2008-1657. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
GLSA-200804-03 : OpenSSH: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-200804-03 OpenSSH: Privilege escalation Two issues have been discovered in OpenSSH: Timo Juhani Lindfors discovered that OpenSSH sets the DISPLAY variable in SSH sessions using X11 forwarding even when it cannot bind the X11 serve...
CVE-2008-1657
OpenSSH vulnerability CVE-2008-1657 affects OpenSSH 4.4 up to versions before 4.9. The issue allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file. Severity is medium (CVSS 2.0 base score 6.5) with network access, low attack compl...
CVE-2007-1657
Stack-based buffer overflow in the filecompress function in minigzip Modules/zlib in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument...
CVE-2007-1657
CVE-2007-1657 describes a stack-based buffer overflow in the file_compress function of minigzip (Modules/zlib) used by Python 2.5 . An overly long file argument can allow a context-dependent attacker to execute arbitrary code. The affected component is minigzip within zlib; the vulnerability impa...
CVE-2006-1657
CVE-2006-1657 affects NT (N.T.) 1.1.0 by Chucky A. Ivey. The vulnerability is a Cross-site Scripting (XSS) in the file index.php where the username parameter is not filtered when the administrator views the Login Log page. The issue enables remote attackers to inject arbitrary web script/HTML. Do...
CVE-2005-1657
Mercur Messaging 2005 SP2 is affected by multiple directory traversal vulnerabilities. An attacker can remotely perform unauthorized file operations via Folder.Id parameters to deletefolder.ctml, deletemessage.ctml, origmessage.ctml, readmessage.ctml; the Message.Id parameter to editmessage.ctml;...
CVE-2004-1657
The provided connected documents confirm CVE-2004-1657 affects dasBlog’s Activity and Events Viewer, where the application fails to sanitize HTTP headers (User-Agent and Referrer), enabling cross-site scripting. The Nessus NASL item specifies vulnerability in dasBlog versions up to 1.6.0 due to u...