SuSE 10 Security Update : XEmacs (ZYPP Patch Number 5250)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

rPSA-2008-0177-1 emacs emacs-leim

rPath Security Advisory: 2008-0177-1 Published: 2008-05-27 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Non-deterministic Unauthorized Access Updated Versions: emacs=conary.rpath.com@rpl:1/21.4a-5.4-1 emacs-leim=conary.rpath.com@rpl:1/21.4a-5.4-1 rPath Issue...

openSUSE 10 Security Update : xemacs-packages (xemacs-packages-5249)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files CVE-2008-2142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : emacs (emacs-5247)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files CVE-2008-2142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SuSE 10 Security Update : Emacs (ZYPP Patch Number 5248)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2008-2142

CVE-2008-2142 : Emacs 21 and XEmacs automatically load and execute .flc (fast-lock) files linked to edited files, enabling user-assisted attackers to execute arbitrary code. Affected components include Emacs/XEmacs; impact involves arbitrary code execution. Public advisories note patches from var...

CVE-2007-5792

The CVE-2007-5792 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD, where RTP packets are not encrypted. This allows remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session. CVSSv2 base score: 7.1 (HIGH); vector: AV:N/AC:M/Au:N/C:C/I:N/A:N. No explicit ...

CVE-2007-5791

The CVE-2007-5791 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD failing to verify that SIP INVITE messages originate from a legitimate server, enabling remote attackers to spoof INVITEs. This can trigger a flood of messages causing a denial of service and may facilitate calls with m...

CVE-2007-2142

CVE-2007-2142 involves multiple PHP remote file inclusion vulnerabilities in AjPortal2Php. It allows remote attackers to execute arbitrary PHP code by passing a URL in the PagePrefix parameter to one of seven includes scripts (begin.inc.php, connection.inc.php, events.inc.php, footer.inc.php, hea...

CVE-2006-2142

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...

CVE-2006-2142

CVE-2006-2142 affects Limbo CMS (PHP) versions 1.04 and earlier. The vulnerability is a remote file inclusion in the classes_dir parameter of classes/adodbt/sql.php, where user-supplied input is used in include_once() without proper sanitization. This allows an attacker to cause arbitrary PHP cod...

CVE-2002-2142

Technical details (affected products, versions, root cause, remediation) are not publicly provided in the connected documents; monitor for updates.

CVE-2005-2142

CVE-2005-2142 is a vulnerability in Golden FTP Server 2.60 where an authenticated remote attacker can use a backslash-dot-dot in the LIST command to disclose directory contents. The available sources consistently describe a directory traversal that allows listing arbitrary directories, exposing f...

CVE-2002-2142

An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certain URL patterns, which prevents the proper...