82 matches found
Debian DSA-2095-1 : lvm2 - insecure communication protocol
Alasdair Kergon discovered that the cluster logical volume manager daemon clvmd in LVM2, The Linux Logical Volume Manager, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CMSQlite 'index.php' SQL Injection and Directory Traversal Vulnerabilities
CMSQlite is prone to multiple SQL injection and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2010-2095
CVE-2010-2095 corresponds to a SQL injection in CMSQlite, affecting CMSQlite 1.2 and earlier. The vulnerability occurs in index.php via the c parameter, enabling remote SQL command execution. CVSS v2 base score 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and p...
CVE-2009-2095
CVE-2009-2095 is a PHP remote file inclusion vulnerability affecting Mundi Mail 0.8.2 via template/simpledefault/admin/_masterlayout.php. The root cause is register_globals being enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the top parameter. When allow_url_fo...
CVE-2009-2095
creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8948...
FreeBSD Ports: squirrelmail, ja-squirrelmail
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: squirrelmail, ja-squirrelmail
The remote host is missing an update to the system as announced in the referenced advisory. VID 7d52081f-2795-11da-bc01-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-2095
CVE-2008-2095 describes an SQL injection in the FlippingBook (com_flippingbook) 1.0.4 component used with Joomla!. The vulnerability affects the index.php file and allows a remote attacker to execute arbitrary SQL commands by manipulating the book_id parameter. The provided connected documents co...
CVE-2008-2095
creationtimestamp| type| source ---|---|--- 2008-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5484...
Debian: Security Advisory (DSA-756-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 756-1 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 756-1. Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1769 Martijn Brinkers...
CVE-2007-2095
CVE-2007-2095 documents a PHP remote file inclusion in MySpeach 1.9 (chat.php) that allows an attacker to execute arbitrary PHP code by supplying a URL in the my[root] parameter. This is a distinct vector from CVE-2007-0498. Evidence across sources confirms the RFI flaw but provides no patch deta...
CVE-2007-2095
PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP code via a URL in the myroot parameter, a different vector than CVE-2007-0498...
CentOS 3 / 4 : SquirrelMail (CESA-2005:595)
An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 04 Aug 2005 The previous SquirrelMail package released with this errata contained a bug which rendered the...
CVE-2006-2095
The vulnerability CVE-2006-2095 affects the Phex client up to version 2.8.6. A remote attacker can cause an application hang (DoS) by initiating multiple chat requests to a single user and then logging off. This is documented across multiple sources (NVD entry and related records) as a denial-of-...
Fedora Core 3 : squirrelmail-1.4.6-0.cvs20050812.1.fc3 (2005-779)
It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...
Fedora Core 4 : squirrelmail-1.4.6-0.cvs20050812.1.fc4 (2005-780)
It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...
CVE-2002-2095
CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...
Moderate: Red Hat Security Advisory: squirrelmail security update
An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 04 Aug 2005 The previous SquirrelMail package released with this errata contained a bug which rendered the...