Gentoo Security Advisory GLSA 200804-03 (openssh)

The remote host is missing updates announced in advisory GLSA 200804-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200804-03 : OpenSSH: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200804-03 OpenSSH: Privilege escalation Two issues have been discovered in OpenSSH: Timo Juhani Lindfors discovered that OpenSSH sets the DISPLAY variable in SSH sessions using X11 forwarding even when it cannot bind the X11 serve...

openSUSE 10 Security Update : openssh (openssh-5149)

A flaw in the X forwarding code of openssh allowed malicious users to steal the X access credentials of other users CVE-2008-1483. Due to another flaw users could bypass the option 'ForceCommand' CVE-2008-1657. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2008-1657

OpenSSH vulnerability CVE-2008-1657 affects OpenSSH 4.4 up to versions before 4.9. The issue allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file. Severity is medium (CVSS 2.0 base score 6.5) with network access, low attack compl...

CVE-2007-1657

Stack-based buffer overflow in the filecompress function in minigzip Modules/zlib in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument...

CVE-2007-1657

CVE-2007-1657 describes a stack-based buffer overflow in the file_compress function of minigzip (Modules/zlib) used by Python 2.5 . An overly long file argument can allow a context-dependent attacker to execute arbitrary code. The affected component is minigzip within zlib; the vulnerability impa...

CVE-2006-1657

CVE-2006-1657 affects NT (N.T.) 1.1.0 by Chucky A. Ivey. The vulnerability is a Cross-site Scripting (XSS) in the file index.php where the username parameter is not filtered when the administrator views the Login Log page. The issue enables remote attackers to inject arbitrary web script/HTML. Do...

CVE-2005-1657

Mercur Messaging 2005 SP2 is affected by multiple directory traversal vulnerabilities. An attacker can remotely perform unauthorized file operations via Folder.Id parameters to deletefolder.ctml, deletemessage.ctml, origmessage.ctml, readmessage.ctml; the Message.Id parameter to editmessage.ctml;...

CVE-2004-1657

The provided connected documents confirm CVE-2004-1657 affects dasBlog’s Activity and Events Viewer, where the application fails to sanitize HTTP headers (User-Agent and Referrer), enabling cross-site scripting. The Nessus NASL item specifies vulnerability in dasBlog versions up to 1.6.0 due to u...

CVE-2002-1657

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack...