USN-890-3: Python 2.4 vulnerabilities

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for the PyExpat module in Python 2.4. Original advisory details: Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked...

CVE-2009-4593

The bftpdutmplog function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.buhost structure member, which might allow remote attackers to cause a denial of service daemon crash via unspecified vectors. NOTE: some of these details are...

Winn Guestbook 2.4 Cross Site Scripting

======================================================================================== | Title : © Winn Guestbook V2.4, Winn.ws Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 ...

Winn Guestbook 2.4 / Winn.ws - Cross-Site Scripting

======================================================================================== | Title : © Winn Guestbook V2.4, Winn.ws Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 ...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

Blender 2.34, 2.35a, 2.4, 2.49b .blend File Command Injection

Exploit for unknown platform in category remote exploits ============================================================= Blender 2.34, 2.35a, 2.4, 2.49b .blend File Command Injection ============================================================= Title: Blender 2.34, 2.35a, 2.4, 2.49b .blend File...

Bftpd Unspecified Remote Denial of Service Vulnerability

Bftpd is prone to an unspecified remote denial-of-service vulnerability. Successful exploits will cause the affected application to crash, denying service to legitimate users. Versions prior to Bftpd 2.4 are vulnerable. OpenVAS Vulnerability Test $Id: bftpd36820.nasl 7573 2017-10-26 09:18:50Z...

Bftpd < 2.4 DoS Vulnerability

Bftpd is prone to an unspecified remote denial of service DoS vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

PT-2009-5889 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.4.37.6 and earlier Linux kernel versions 2.6.x before 2.6.32-rc5 Description: The issue is related to the tcf fill node function in the netlink subsystem, which does not initialize a certain structure member. This migh...

Overflow vulnerability:linux, each version corresponding overflow vulnerability finishing summary(overflow code)-vulnerability warning-the black bar safety net

2.4.17 local kmod 2.4.18 brk brk2 local kmod km. 2 2.4.19 brk brk2 local kmod km. 2 2.4.20 ptrace kmod ptrace-kmod km. 2 brk brk2 2.4.21 km. 2 brk brk2 ptrace ptrace-kmod 2.4.22 km. 2 brk2 brk ptrace ptrace-kmod 2.4.22-1 0 loginx ./ loginx 2.4.23 mremappte 2.4.24 mremappte Uselib24 2.4.25-1...

Fedora 11 : drupal-date-6.x.2.4-0.fc11 (2009-9736)

Advisory ID: DRUPAL-SA-CONTRIB-2009-057 http://drupal.org/node/579144 - Project: Date third-party module Version: 5.x, 6.x Date: 2009-September-16 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting -------- DESCRIPTION...

Unrestricted file upload

Unrestricted file upload vulnerability in the add2 action in aupload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request ...

CVE-2008-7208

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username parameter $usernameb variable to alogin.php or 2 user parameter to staff.php...

Sql injection

Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username parameter $usernameb variable to alogin.php or 2 user parameter to staff.php...

CVE-2008-7209

CVE-2008-7209 describes an unrestricted file upload vulnerability in OneCMS 2.4 (a_upload.php, add2 action). The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a safe content type (e.g., image/gif), then accessing it via a direct reque...

Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit [3]

Exploit for linux platform in category local exploits =========================================================== Linux Kernel 2.4/2.6 socksendpage Local Root Exploit 3 =========================================================== This third version features: Complete support for i386, x8664, ppc a...

Linux Kernel tc_fill_tclass()函数本地信息泄露漏洞

BUGTRAQ ID: 36304 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/sched/schapi.c文件中的tcfilltclass函数没有清除某些结构成员便将其返回给了用户空间，这可能导致泄漏3个字节的未初始化内核内存。 Linux kernel 2.6.x Linux kernel 2.4.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit (ppc)

No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...

Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit (ppc)

Exploit for linux platform in category local exploits ============================================================= Linux Kernel 2.4/2.6 socksendpage Local Root Exploit ppc ============================================================= / Linux socksendpage NULL pointer dereference Copyright 2009...