14488 matches found
RHEL 4 : dbus (RHSA-2007:0008)
Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide...
CentOS 4 : dbus (CESA-2007:0008)
Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide...
RHEL 3 / 4 : squirrelmail (RHSA-2007:0022)
A new squirrelmail package that fixes security issues is now available for Red Hat Enterprise Linux 3 and 4. SquirrelMail is a standards-based webmail package written in PHP. Several cross-site scripting bugs were discovered in SquirrelMail. An attacker could inject arbitrary JavaScript or HTML...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
RHEL 4 : postgresql (RHSA-2007:0064)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0064 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. A flaw was found in the way the PostgreSQL server handles certa...
CVE-2006-6979
The ruby handlers in the Magnatune component in Amarok do not properly quote text in certain contexts, probably including construction of an unzip command line, which allows attackers to execute arbitrary commands via shell metacharacters...
CVE-2006-6982
CVE-2006-6982 affects 3proxy versions 0.5 to 0.5.2. The issue is that NTLM authentication is not offered before basic authentication, which may cause browsers with incomplete RFC2616/RFC2617 support to fall back to basic cleartext credentials even when NTLM is available, potentially enabling cred...
CVE-2006-6979
The CVE-2006-6979 entry concerns Amarok’s Magnatune component, specifically the Ruby handlers. The root cause is inadequate quoting in certain contexts (likely during unzip command construction), which can allow an attacker to inject shell metacharacters and execute arbitrary commands. The issue ...
CVE-2006-6980
Technical details about CVE-2006-6980 are not publicly available in the provided documents. Monitor for updates.
CVE-2006-6981
CVE-2006-6981 affects 3proxy versions 0.5 to 0.5.2. The issue arises when NT-encoded passwords are used and NTLM authentication is involved, allowing remote attackers to cause a denial of service by overwriting a password hash, resulting in a blocked account. The vulnerability is documented with ...
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the 1 mode parameter to memberlist.php and the 2 highlight parameter to viewtopic.php that are used a...
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the 1 mode parameter to memberlist.php and the 2 highlight parameter to viewtopic.php that are used a...
CVE-2006-2219
Summary: CVE-2006-2219 affects phpBB 2.0.20 . The issue arises because user-supplied input variable types are not verified before being passed to type-dependent functions, enabling information disclosure via error messages. Demonstrated with the mode parameter to memberlist.php and the highlight ...
CVE-2006-6978
The CVE-2006-6978 entry describes a Cross-site Scripting (XSS) vulnerability in FCKEditor’s "Basic Toolbar Selection". The issue allows an attacker to trigger arbitrary JavaScript via the javascript: URI in the href or onmouseover attributes of an A tag. Affected component is FCKEditor’s Basic To...
CVE-2006-6975
CVE-2006-6975 is a PHP remote file inclusion vulnerability reported in CentiPaid 1.4.3, involving centipaid_class.php where an attacker could use a URL in the class_pwd parameter to execute arbitrary code. The issue is disputed by CVE sources and third parties, who claim that class_pwd is set to ...
CVE-2006-6975
PHP remote file inclusion vulnerability in centipaidclass.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the classpwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $classpwd is set to a static value before th...
CVE-2006-2220
PHPBB 2.0.20 is vulnerable to an information disclosure due to improper validation of user-supplied inputs used as SQL LIMIT bounds. The issue allows remote attackers to reveal sensitive data via a negative LIMIT (demonstrated through memberlist.php), producing an error message that exposes the q...
CVE-2006-6977
CVE-2006-6977 affects FreeTextBox’s Basic Toolbar Selection. The vulnerability is a cross-site scripting flaw in the A tag where a javascript: URI in href or onmouseover can be used to run arbitrary JavaScript in a remote context. Affected component is the toolbar’s HTML output; the underlying is...
CVE-2006-6977
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
