Debian DSA-1667-1 : python2.4 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2315 David Remahl discovered several integer overflows in the stringobject, unicodeobject, bufferobject,...

DSA-1667-1 python2.4 - several vulnerabilities

Bulletin has no description...

CVE-2008-5147

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

Arbitrary file deletion

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

CVE-2008-5147

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

CVE-2008-5147

CVE-2008-5147 affects docvert 2.4 via a symlink attack in test-pipe-to-pyodconverter.org.sh that targets the temporary file /tmp/outer.odt. This local-access flaw allows local users to overwrite arbitrary files. The description and connected documents confirm the vulnerable component and the root...

CVE-2008-5147

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

Remote file inclusion

PHP remote file inclusion vulnerability in Admin/ADMPagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter...

CVE-2008-5063

OTManager 2.4 is affected by a PHP remote file inclusion in Admin/ADM_Pagina.php. The vulnerability allows remote code execution by supplying a URL in the Tipo parameter, per CVE-2008-5063. The NVD entry shows a high-severity, network-exposed flaw; exploitation details and available fixes are not...

CVE-2008-5063

PHP remote file inclusion vulnerability in Admin/ADMPagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter...

OTManager CMS 2.4 (Tipo) Remote File Inclusion Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= OTManager 2.4 Remote File Inclusion RFI Vulnerability - Security flaw discovered by Colt7r - CONTACT: colt7r |@| bsdmail.org - Affected Software: OTManager 2.4 - Risk: HIGH - Exploit:...

otmanager-rfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= OTManager 2.4 Remote File Inclusion RFI Vulnerability - Security flaw discovered by Colt7r - CONTACT: colt7r |@| bsdmail.org - Affected Software: OTManager 2.4 - Risk: HIGH - Exploit: http://host/Admin/ADMPagina.php?Tipo=EVIL CODE...

OTManager CMS 2.4 - Tipo Remote File Inclusion

OTManager CMS 2.4 - Tipo Remote File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= OTManager 2.4 Remote File Inclusion RFI Vulnerability - Security flaw discovered by Colt7r - CONTACT: colt7r |@| bsdmail.org - Affected Software: OTManager 2.4 - Risk: HIGH - Exploit:...

OTManager CMS 2.4 (Tipo) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ OTManager CMS 2.4 Tipo Remote File Inclusion Vulnerability ============================================================ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

Directory traversal

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

CVE-2008-4781

A CVE-2008-4781 entry concerns a directory traversal in update.php of MyKtools 2.4. The vulnerability allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter, enabling local file inclusion and potential code execution. The affected componen...

RaidenFTPD 2.4 build 3620 Remote Denial of Service Exploit

No description provided by source. RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn host login password\n" print "Note: anonymous is enought"...

RaidenFTPd 2.4 build 3620 - Remote Denial of Service

RaidenFTPD V2.4 build 3620 exploit probaly heap overflow xdmnt 2008 -- coding: windows-1252 -- import socket import sys, time evilcwd = "/"+"\x22"255 evildir = "X"505 def helpinfo: print "Usage: ShaoKahn \n" print "Note: anonymous is enought" def dosithostname, username, passwd: sock =...

Gentoo Security Advisory GLSA 200807-16 (python)

The remote host is missing updates announced in advisory GLSA 200807-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200807-16 (python)

The remote host is missing updates announced in advisory GLSA 200807-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...