Directory traversal

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

Directory traversal

Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1926

The CVE-2010-1926 entry applies to openMairie openCourrier 2.02 and 2.03 beta. It describes a directory traversal vulnerability in scr/soustab.php that, with register_globals enabled, allows remote attackers to include and execute arbitrary local files via traversal sequences in the dsn[phptype] ...

CVE-2010-1935

CVE-2010-1935 affects OpenMairie Openpresse 1.01: a directory traversal/LFI in scr/soustab.php when register_globals is enabled, allowing remote inclusion/execution of local files via dsn[phptype]. Related to CVE-2007-2069. CVSS2 base score 6.8 (MEDIUM). Connected OpenVAS entries corroborate LFI ...

CVE-2010-1920

Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

SLES9: Security update for openldap2-client, openldap2-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-client openldap2-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keywo...

SLES9: Security update for pam_ldap

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pamldap For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015275 within the SuS...

SLES9: Security update for pam_ldap

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pamldap For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015275 within the SuS...

CVE-2009-2069

CVE-2009-2069 refers to Microsoft Internet Explorer before 8. IE caches a certificate presented via a proxy’s 4xx/5xx CONNECT response, allowing a man-in-the-middle to spoof an arbitrary HTTPS site by first obtaining a valid certificate from the site and later serving a crafted 502 page. Impact: ...

Gentoo Security Advisory GLSA 200507-13 (pam_ldap nss_ldap)

The remote host is missing updates announced in advisory GLSA 200507-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

DSquare Exploit Pack: D2SEC_GW7

Name| d2secgw7 ---|--- CVE| CVE-2008-2069 Exploit Pack| D2ExploitPack Description| Novell GroupWise mailto URI Handler Stack Overflow Notes|...

CVE-2008-2069

CVE-2008-2069 affects Novell GroupWise 7, where a buffer overflow in the mailto: URI handler allows remote attackers to cause a denial of service or execute arbitrary code. The vulnerability is triggered by a long argument in a mailto: URI, with public references noting exploitation in exploit pa...

CVE-2008-2069

creationtimestamp| type| source ---|---|--- 2008-04-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5515...

openSUSE 10 Security Update : openssl (openssl-2069)

This update fixes a bug in OpenSSL that allowed the forgery of some special RSA signatures. CVE-2006-4339 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openssl-2069. The text description of...

CVE-2007-2069

Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dsnphptype parameter...

CVE-2007-2069

CVE-2007-2069 describes a directory traversal vulnerability in scr/soustab.php of OpenMairie Opencatalogue 1.024 and earlier. Connected sources corroborate that, when register_globals is enabled, remote attackers can use directory traversal sequences in the dsn[phptype] parameter to include and e...

VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0008 Synopsis: VMware ESX Server 2.0.2 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-202-200610-patch.html...

CentOS 4 : openldap / nss_ldap (CESA-2005:767)

Updated openldap and nssldap packages that correct a potential password disclosure issue and possible authentication vulnerability are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

CentOS 3 : openldap / nss_ldap (CESA-2005:751)

Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...