Security fix for the ALT Linux 9 package polkit version 0.7-alt3

April 4, 2008 Valery Inozemtsev 0.7-alt3 - fixed CVE-2008-1658 - drop polkit-bash-completion.sh close 15232...

Security fix for the ALT Linux 6 package polkit version 0.7-alt3

April 4, 2008 Valery Inozemtsev 0.7-alt3 - fixed CVE-2008-1658 - drop polkit-bash-completion.sh close 15232...

CVE-2007-1658

CVE-2007-1658 affects Windows Mail in Windows Vista. The vulnerability arises from improper handling of local/UNC navigation links (UNC/local file paths) in Windows Mail, allowing a remote attacker to execute arbitrary code when a user clicks a crafted link in an email. The underlying root cause ...

CVE-2005-1658

CVE-2005-1658 affects MyServer 0.8. A directory traversal flaw in filemanager.cpp allows remote attackers to list the parent directory of the web root by using a URL containing a triple dot ("..."). The NVD/CVE entries document this vulnerability with a CVSSv2 base score of 5.0 (AV:N/AC:L/Au:N/C:...

CVE-2002-1658

CVE-2002-1658 describes a buffer overflow in htdigest used by Apache 1.3.26/1.3.27 that may allow arbitrary code execution via a long user argument. The vulnerability is tied to htdigest functionality, with local access as the attack vector and no setuid/setgid context; escalation of privileges i...

CVE-2004-1658

Kerio Personal Firewall 4.0 KPF4 allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable...

CVE-2002-1658

Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless...