FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for keepalived FEDORA-2012-12377

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Sql injection

Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information...

CVE-2011-5152

Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse 1 Wintab32.dll or 2 CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the...

CVE-2011-5153

CVE-2011-5153 describes an untrusted search path vulnerability in FotoSlate 4.0 Build 146. Local users can gain privileges via a Trojan horse dwmapi.dll placed in the current working directory, demonstrated by a directory containing a .plp file. Root cause is untrusted DLL/search path handling. T...

CVE-2011-5154

The CVE-2011-5154 entry covers SAP GUI 6.4–7.2 with two vulnerable executables (SAPGui.exe and BExAnalyzer.exe). The issue is an untrusted search path that allows privilege escalation via a Trojan horse MFC80LOC.DLL in the current working directory, demonstrated by a directory containing a .sap f...

CVE-2011-5156

CVE-2011-5156 describes an Untrusted search path vulnerability in Effective File Search 6.7, where local users can gain privileges by placing a Trojan horse ztvunrar36.dll in the current working directory, demonstrated via a directory containing an .efs file. Affected product is Effective File Se...

CVE-2011-5154

Multiple untrusted search path vulnerabilities in 1 SAPGui.exe and 2 BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these...

CVE-2011-5152

CVE-2011-5152 involves multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 , enabling local users to gain privileges via a Trojan horse placed in the current working directory (specifically the files Wintab32.dll or CV11-DialogEditor.dll ) as shown by a direct...

CVE-2011-5155

CVE-2011-5155 involves an untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296. Local users can gain privileges by placing a Trojan horse ijl15.dll in the current working directory, with exploitation demonstrated via directories containing extensions such as .hmxz, .hmxp, .hmskin...

CVE-2011-5157

CVE-2011-5157: A local untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges by placing a Trojan horse DLL in the current working directory. This is the same family as CVE-2011-0107 and is tied to Attachmate Reflection’s Windows client....

Mandriva Linux Security Advisory : squid (MDVSA-2011:193)

A vulnerability has been discovered and corrected in squid : The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service daemon abort via a DNS reply containing a CNAME record that references another CNAME record that...

Mandriva Linux Security Advisory : networkmanager (MDVSA-2011:171)

Security issues were identified and fixed in networkmanager : GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors CVE-2011-2176. Incomplete blackli...

Mandriva Linux Security Advisory : libreoffice (MDVSA-2011:172)

Multiple vulnerabilies has been discovered and corrected in libreoffice : Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file CVE-2011-2685. oowriter in OpenOffice.org 3.3.0 and...

Mandriva Linux Security Advisory : cups (MDVSA-2011:147)

A vulnerability has been discovered and corrected in cups : The gifreadlzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary...

Mandriva Linux Security Advisory : wireshark (MDVSA-2011:138)

This advisory updates wireshark to the latest version 1.6.2, fixing several security issues : The prototreeadditem function in Wireshark 1.6.1, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service infinite loop via vectors involving a...

Mandriva Linux Security Advisory : fetchmail (MDVSA-2012:149)

Multiple vulnerabilities has been found and corrected in fetchmail : Fetchmail version 6.3.9 enabled all SSL workarounds SSLOPALL which contains a switch to disable a countermeasure against certain attacks against block ciphers that permit guessing the initialization vectors, providing that an...

CVE-2011-3146

librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as ...

CVE-2011-3146

CVE-2011-3146 affects librsvg before 2.34.1. A SVG containing a node named starting with “fe” can be misidentified as a RsvgFilterPrimitive, allowing context-dependent attackers to trigger a NULL pointer dereference and potentially achieve arbitrary code execution or a denial of service. Publicly...

CVE-2011-4449

actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANETMODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a...