openSUSE 10 Security Update : libqt4 (libqt4-4790)

A bug in the QSslSocket class could under certain circumstances lead to incorrect SSL certificates beeing accepted as valid CVE-2007-5965. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : xorg-x11-Xnest (xorg-x11-Xnest-4859)

This update fixes various Xserver security issues. File existence disclosure vulnerability CVE-2007-5958. XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...

Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6

Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject &LT8bpp shm pixmaps...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...

CVE-2007-6686

The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller...

CVE-2007-6690

The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors...

CVE-2007-6685

CVE-2007-6685 affects the Publish XP module of Menalto Gallery prior to 2.2.4. The description states an unspecified vulnerability that lets an attacker create albums and upload files via unknown vectors. Remediation per connected sources is to upgrade to Gallery 2.2.4 or newer (e.g., Gallery 2.2...

CVE-2007-6692

CVE-2007-6692 corresponds to an open redirect vulnerability in Menalto Gallery up to version 2.2.3, allowing remote attackers to redirect users to arbitrary sites via URLs in the Core and print modules. Exploitation could enable phishing by directing victims to attacker-controlled pages. Gentoo G...

CVE-2007-6687

The CVE-2007-6687 case affects Menalto Gallery (pre-2.2.4). The vulnerability is described as multiple XSS flaws that allow remote attackers to inject arbitrary script/HTML via crafted filenames in the Core or add-item modules, or via HTTP PROPPATCH in the WebDAV module. Impact is conveyed as the...

CVE-2007-6682

Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...

CVE-2007-6689

CVE-2007-6689 affects Menalto Gallery prior to version 2.2.4. The vulnerability arises because file upload handling does not properly validate malicious file extensions in the Core application or MIME module, enabling an attacker to execute arbitrary code on the server. Official advisories (Red H...

CVE-2007-6690

CVE-2007-6690 affects the Gallery Remote module in Menalto Gallery prior to 2.2.4. The vulnerability stems from permission checks not being performed for unspecified GR commands, with both impact and attack vectors described as unknown in the sources. Gentoo GLSA 200802-04 and related advisories ...

CVE-2007-6681

Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long subtitle in a 1 MicroDvd, 2 SSA, and 3 Vplayer file...

CVE-2007-6691

CVE-2007-6691 affects Menalto Gallery

CVE-2007-6693

CVE-2007-6693 affects Menalto Gallery’s WebCam module prior to version 2.2.4, tied to a proxied request vulnerability. Connected sources (GLSA 200802-04) describe multiple Gallery vulnerabilities (CVE-2007-6685..6693) with remote code execution, XSS, and CSRF potential; advisory recommends upgrad...

CVE-2007-6688

CVE-2007-6688 affects Menalto Gallery installations up to version 2.2.4 (Installation application) with an unspecified vulnerability tied to the web-accessibility protection of the storage folder. The Gentoo GLSA and related advisories note multiple vulnerabilities in Gallery (including CVE-2007-...

CVE-2007-6686

The CVE-2007-6686 issue affects Menalto Gallery prior to 2.2.4, where the URL rewrite module could be abused to include and execute arbitrary local files via vectors related to the admin controller. Impact is described as full confidentiality, integrity, and availability compromise. Remediation p...

CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

Debian Security Advisory DSA 1364-1 (vim)

The remote host is missing an update to vim announced via advisory DSA 1364-1. OpenVAS Vulnerability Test $Id: deb13641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1364-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...