CVE-2011-1659

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

CVE-2011-1659

CVE-2011-1659 is a vulnerability in the GNU C Library (glibc) prior to 2.13 where an integer overflow in posix/fnmatch.c can be triggered by long UTF-8 strings used in an fnmatch call, potentially causing an application crash (denial of service). Connected advisories (e.g., F5 BIG-IP SOL09408132)...

RHEL 5 : glibc (RHSA-2011:0412)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0412 advisory. - glibc: Improper encoding of names with certain special character in utilities for writing to mtab table CVE-2010-0296 - glibc: CVE-2010-38...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

CVE-2010-1659

Directory traversal vulnerability in the Ultimate Portfolio comultimateportfolio component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1659

CVE-2010-1659 : A directory traversal (Local File Inclusion) vulnerability affects the Joomla! extension component com_ultimateportfolio version 1.0. The underlying issue is an improper validation of the controller parameter in index.php, allowing an attacker to read arbitrary files by supplying ...

CVE-2010-1659

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12426...

CentOS 5 : pcre (CESA-2007:0967)

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

SLES9: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013426 within...

SLES9: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015818 within...

SLES9: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018729 within...

SLES9: Security update for pcre

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pcre pcre-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013426 within...

CVE-2009-1659

CVE-2009-1659 describes an unrestricted file upload in eLitius 1.0, via admin/uploadimage.php. Attackers could upload an avatar file (e.g., image/gif), bypass access restrictions, then request the uploaded file under admin/banners/ to execute arbitrary files. The documents do not provide remediat...

HP-UX Update for LDAP-UX HPSBUX02330

Check for the Version of LDAP-UX OpenVAS Vulnerability Test HP-UX Update for LDAP-UX HPSBUX02330 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2009-1659

creationtimestamp| type| source ---|---|--- 2009-05-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8603...

Mandriva Update for pcre MDKSA-2007:212 (pcre)

Check for the Version of pcre OpenVAS Vulnerability Test Mandriva Update for pcre MDKSA-2007:212 pcre Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for pcre RHSA-2007:1068-01

Check for the Version of pcre OpenVAS Vulnerability Test RedHat Update for pcre RHSA-2007:1068-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Debian DSA-1659-1 : libspf2 - buffer overflow

Dan Kaminsky discovered that libspf2, an implementation of the Sender Policy Framework SPF used by mail servers for mail filtering, handles malformed TXT records incorrectly, leading to a buffer overflow condition CVE-2008-2469 . Note that the SPF configuration template in Debian's Exim...

Gentoo Security Advisory GLSA 200805-11 (chicken)

The remote host is missing updates announced in advisory GLSA 200805-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-19 (goffice)

The remote host is missing updates announced in advisory GLSA 200801-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...