MGASA-2013-0261 Updated xpdf packages fixes security vulnerability

PDF files could be used to inject shell code when xpdf was run from some terminal emulators, due to the use of escape sequences in error messages CVE-2012-2142...

Updated libimobiledevice packages fix CVE-2013-2142

Updated libimobiledevice packages fix security vulnerability: Paul Collins discovered that libimobiledevice incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files and access device keys. In the default Ubuntu installation, this issue shoul...

CVE-2011-2142

The CVE-2011-2142 issue affects IBM Datacap Taskmaster Capture 8.0.1 prior to FP1, where the Web Client Service requires a cleartext password. The available data (NVD entry) states the impact and vectors as unspecified, with CVSS v2 base score 5.0 (Medium) and a network attack vector with no auth...

Battlefield 2/2142 - Packet Null Pointer Dereference Remote Denial of Service

source: https://www.securityfocus.com/bid/46478/info Battlefield 2 and 2142 are prone to a remote denial-of-service vulnerability due to a NULL-pointer dereference condition. An attacker may exploit this issue to crash the application, resulting in a denial-of-service condition. Battlefield 2...

Debian DSA-2142-1 : dpkg - directory traversal

Jakub Wilk discovered that the dpkg-source component of dpkg, the Debian package management system, doesn't correctly handle paths in patches of source packages, which could make it traverse directories. Raphael Hertzog additionally discovered that symbolic links in the .pc directory are followed...

CVE-2010-2627

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 1.5.3153-802.0 and earlier, and Battlefield 2142 1.10.48.0 and earlier, allow remote servers to overwrite arbitrary files on the client via ".." dot dot backslash sequences in URLs for the 1...

CVE-2010-2627

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 1.5.3153-802.0 and earlier, and Battlefield 2142 1.10.48.0 and earlier, allow remote servers to overwrite arbitrary files on the client via ".." dot dot backslash sequences in URLs for the 1...

CVE-2010-2627

CVE-2010-2627 affects the Refractor 2 engine used by Battlefield 2 (1.5.3153-802.0 and earlier) and Battlefield 2142 (1.10.48.0 and earlier). The issue arises from directory traversal via ".." in URLs for specific resources: sponsor/logo, community logo, and related URLs (DemoDownloadURL, DemoInd...

EA Battlefield 2 1.41 Battlefield 2142 1.50 - Multiple Denial of Service Vulnerabilities

EA Battlefield 2 1.41 Battlefield 2142 1.50 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/40605/info Battlefield 2 and Battlefield 2142 are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle speciall...

CVE-2010-2142

CVE-2010-2142 is a SQL injection vulnerability in Cyberhost, specifically in the file default.asp, where the vulnerable parameter is the id parameter. The underlying issue is that user-supplied input reaches the SQL query without proper sanitization, allowing remote attackers to execute arbitrary...

CVE-2010-2142

creationtimestamp| type| source ---|---|--- 2010-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34034...

SLES10: Security update for Emacs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: emacs emacs-el emacs-info emacs-nox emacs-x11 More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SuSE9 Security Update : Emacs (YOU Patch Number 12157)

Emacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2009-2142

CVE-2009-2142 affects Zip Store Chat (versions 4.0 and 5.0) via admin/index.asp. Multiple SQL injection vulnerabilities enable remote attackers to modify or query backend databases by supplying crafted values in the (1) login and (2) senha parameters. The CVE entry cites arbitrary SQL execution a...

CVE-2009-2142

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8935...

Mandriva Update for emacs MDVSA-2008:153 (emacs)

Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2008:153 emacs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for xemacs-packages-extra FEDORA-2008-5446

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xemacs-packages-extra FEDORA-2008-5446

Check for the Version of xemacs-packages-extra OpenVAS Vulnerability Test Fedora Update for xemacs-packages-extra FEDORA-2008-5446 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 8 : xemacs-packages-extra-20070427-2.fc8 (2008-5504)

Wed Jun 18 2008 Ville Skytta - 20070427-2 - Apply upstream security fix for CVE-2008-2142 446069. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 9 : xemacs-packages-extra-20070427-2.fc9 (2008-5446)

Wed Jun 18 2008 Ville Skytta - 20070427-2 - Apply upstream security fix for CVE-2008-2142 446069. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...