204 matches found
subversion security update
1.1.4-4.0.1 - RHAT logo removed updated redhat.png in tarball 1.1.4-4 - add security fix for CVE-2011-1752 709217...
CVE-2011-1752
This CVE affects Subversion 1.6.x prior to 1.6.17, specifically the mod_dav_svn Apache module. The root cause is a NULL pointer dereference when handling baselined WebDAV resource requests, allowing remote attackers to cause a denial of service (daemon crash). The issue is noted as exploited in t...
USN-1144-1: Subversion vulnerabilities
Joe Schaefer discovered that the Subversion moddavsvn module for Apache did not properly handle certain baselined WebDAV resource requests. A remote attacker could use this flaw to cause the service to crash, leading to a denial of service. CVE-2011-1752 Ivan Zhakov discovered that the Subversion...
Mandriva Update for subversion MDVSA-2011:106 (subversion)
Check for the Version of subversion OpenVAS Vulnerability Test Mandriva Update for subversion MDVSA-2011:106 subversion Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
[SECURITY] [DSA 2251-1] subversion security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2251-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 02, 2011 http://www.debian.org/security/faq -...
CVE-2011-1752
The moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request for a baselined WebDAV resource, as exploited in the wild in May 2011...
[SECURITY] [DSA 2251-1] subversion security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2251-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 02, 2011 http://www.debian.org/security/faq -...
Security Advisories from TEHTRI-Security at HITB Europe
Gents, TEHTRI-Security was invited to give a talk called "Web In The Middle, Attacking Clients", at the first Hack In The Box Europe, Amsterdam http://conference.hackinthebox.org/hitbsecconf2010ams/ . During our talk, we released multiple advisories and we explained many issues related to some...
CVE-2010-1752
CVE-2010-1752 is a CFNetwork stack overflow in iOS (Apple) URL handling, affecting iOS before 4 on iPhone/iPod touch. The vulnerability allows remote attackers to cause a crash or execute arbitrary code via crafted web content. Connected sources (Apple security advisories HT4225/HT4435) indicate ...
CVE-2010-1752
Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to URL handling...
CVE-2009-1752
The CVE-2009-1752 entry concerns exJune Office Message System 1, which fails to properly restrict access to configure.asp and addmessage2.asp, allowing remote attackers to gain privileges through a direct request. The NVD notes a base score of 7.5 (HIGH) with network attack vector and low attack ...
Debian: Security Advisory (DSA-1752-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-1752
CVE-2008-1752 affects ezRADIUS 0.1. The vulnerability is due to insufficient access control exposing sensitive files under the web root, allowing remote attackers to directly fetch config.ini or database.ini and obtain credentials. This is documented across multiple sources in the connected set. ...
CVE-2005-1752
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename parameter...
CVE-2005-1752
CVE-2005-1752 affects the Gforge SCM component, specifically viewFile.php, where the file_name parameter can be manipulated to execute arbitrary shell commands. The issue exists in Gforge before version 4.0, enabling remote attackers to run commands with the shell via crafted input. The provided ...
CVE-2006-1752
Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...
CVE-2006-1752
The CVE-2006-1752 entry describes multiple XSS vulnerabilities in the MvBlog backend prior to version 1.6. The issue allows remote attackers to inject arbitrary web script or HTML through the comment fields (name or body). The sources do not provide concrete exploit vectors, in-the-wild exploitat...
CVE-2005-1752
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename parameter...
CVE-2002-1752
CVE-2002-1752 ffects CGIScript.net csChat-R-Box. csChatRBox.cgi processes the setup parameter with Perl’s eval, enabling remote attackers to execute arbitrary code. The vulnerability is confirmed across multiple sources (NVD/CVE entries; PT-Security advisory) and is described as a remote code exe...