[SECURITY] [DSA 1068-1] New fbi packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1068-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1068-1] New fbi packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1068-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2006 http://www.debian.org/security/faq -...

DEBIAN-CVE-2006-1695

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...

CVE-2006-1695

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...

CVE-2002-1695

CVE-2002-1695 affects Norton Internet Security 2001. The issue stems from the product opening log files with FILE_SHARE_READ and FILE_SHARE_WRITE, which could allow remote attackers to modify log contents while Norton Internet Security is running. The provided documents do not include a remediati...

CVE-2005-1695

CVE-2005-1695 affects PostNuke RSS module (versions 0.750, 0.760RC2/RC3). The vulnerability is described as multiple cross-site scripting (XSS) flaws allowing remote injection of script/HTML via parameters: rss_url in magpie_slashbox.php and url in magpie_simple.php/magpie_debug.php. Connected Op...

CVE-2004-1695

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...

CVE-2004-1695

CVE-2004-1695 affects EmuLive Server4 Commerce Edition Build 7560. The connected Nessus entry discloses a concrete vulnerability in the administrative interface: a remote attacker can bypass authentication by requesting the page "/public/admin/index.htm" directly, effectively gaining administrati...

Emulive Server4 Authentication Bypass

The remote host is running EmuLive Server4, a web and media streaming server. There is a flaw in the administrative interface that allows a remote attacker to bypass the authentication procedure by requesting the page '/public/admin/index.htm' directly. An attacker may exploit this flaw to gain...

CVE-2004-1695

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...