SuSE9 Security Update : libxml (YOU Patch Number 9579)

This update adds missing patches for a buffer overflow in URL parsing code CVE-2004-0989 and a buffer overflow while handling DNS responses. CVE-2004-0110 These bugs can be exploited remotely to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

SuSE9 Security Update : openmotif (YOU Patch Number 9399)

This update fixes following security problems in OpenMotif : - Several stack overflows in the libXPM image handling library contained within OpenMotif were fixed. CVE-2004-0687 - Several integer overflow problems in the libXPM image handling library contained within OpenMotif were fixed...

SuSE9 Security Update : apache2-mod_python (YOU Patch Number 11804)

This update fixes a buffer overflow in apache2-modpython that occurs while using python-based output-filter. This bug can be triggered remotely to read possibly confidential data from the process space of the web-server and in rare cases to execute arbitrary code. CVE-2004-2680 %NASLMINLEVEL 7030...

SuSE9 Security Update : gnome-vfs (YOU Patch Number 10009)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

SuSE9 Security Update : wget (YOU Patch Number 11090)

This update fixes a security bug in wget, where evil servers could send terminal escape codes to the user calling wget. This would only affect interactive sessions. CVE-2004-1488 Additionally a previous '.file' fix was found to be buggy and replaced. This bug could lead to '.directories' not bein...

SuSE9 Security Update : enscript (YOU Patch Number 9867)

Unsanitised input can caues the execution of arbitrary commands via EPSF pipe support. This has been disabled, also upstream. CVE-2004-1184 - Due to missing sanitising of filenames it is possible that a specially crafted filename can cause arbitrary commands to be executed. CVE-2004-1185 -...

SuSE9 Security Update : Midnight Commander (YOU Patch Number 9797)

Various security bugs ranging from denial of service conditions to command execution have been fixed. CVE-2004-1004, CVE-2004-1005, CVE-2004-1176 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : libxml2 (YOU Patch Number 9581)

This update fixes a buffer overflow in the DNS handling code CVE-2004-0110. This bug can be exploited remotely via a DNS server under the control of the attacker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : gnome-vfs2,gnome-vfs2-doc (YOU Patch Number 10010)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

SuSE9 Security Update : unarj (YOU Patch Number 9523)

A directory traversal bug was spotted in the unarj program CVE-2004-0947. Additionaly SUSE Security audited unarj and found several buffer overflows which are also fixed by this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-8594 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8594. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. OpenVAS Vulnerability Test $Id: fcore20098582.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8582 libxml Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Sql injection

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...

Fedora 11 : libxml-1.8.17-24.fc11 (2009-8582)

This update includes patches from RHEL-3 addressing a number of security vulnerabilities: - CVE-2004-0110 arbitrary code execution via a long URL - CVE-2004-0989 arbitrary code execution via a long URL - CVE-2009-2414 stack consumption DoS vulnerabilities - CVE-2009-2416 use-after-free DoS...

Fedora 10 : libxml-1.8.17-24.fc10 (2009-8594)

This update includes patches from RHEL-3 addressing a number of security vulnerabilities: - CVE-2004-0110 arbitrary code execution via a long URL - CVE-2004-0989 arbitrary code execution via a long URL - CVE-2009-2414 stack consumption DoS vulnerabilities - CVE-2009-2416 use-after-free DoS...

CVE-2009-2496

CVE-2009-2496 : Heap-based/heap corruption vulnerability in the OWC10.Spreadsheet ActiveX control of Microsoft Office Web Components. Exploitation requires a user to load a malicious web page and trigger a specific sequence of method calls, leading to remote code execution. Affected products incl...

3Com SuperStack Switch Denial of Service

This module causes a temporary denial of service condition against 3Com SuperStack switches. By sending excessive data to the HTTP Management interface, the switch stops responding temporarily. The device does not reset. Tested successfully against a 3300SM firmware v2.66. Reported to affect...

JVN#93827000 Tree BBS from Let's PHP! vulnerable to cross-site scripting

Tree BBS from Let's PHP! is a tree-structured bulletin board software. Tree BBS contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by t...

RedHat Security Advisory RHSA-2009:1101

The remote host is missing updates announced in advisory RHSA-2009:1101. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer overflow flaws were found in cscope. An attacker could create a specially crafted source code file that could cause cscope to crash or,...