CentOS 4 : openoffice.org2 (CESA-2008:0537)

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...

RHEL 4 / 5 : openoffice.org (RHSA-2008:0537)

Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that...

RHEL 3 / 4 : openoffice.org (RHSA-2008:0538)

Updated openoffice.org packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop...

openoffice.org security update

1.1.5-10.0.5 - Resolves: rhbz450521 CVE-2008-2366 1.1.5-10.0.4 - Resolves: rhbz450521 CVE-2008-2152...

Fedora 9 : openoffice.org-2.4.1-17.3.fc9 (2008-5143)

Update to upstream version 2.4.1 to fix a range of reported problems and a security issue CVE-2008-2152: http://www.openoffice.org/security/cves/CVE-2008-2152.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora 8 : openoffice.org-2.3.0-6.15.fc8 (2008-5247)

Resolves CVE-2008-2152, a potential overflow in allocating memory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : openoffice.org-2.3.0-6.9.fc7 (2008-5239)

Resolves CVE-2008-2152, a potential overflow in allocating memory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2008-2152

CVE-2008-2152 affects OpenOffice.org 2.0–2.4, via an integer/heap overflow in the rtl_allocateMemory routine (sal/rtl/source/alloc_global.c) that can be triggered by a crafted file. This heap-based overflow could allow a remote attacker to crash OpenOffice.org or potentially execute arbitrary cod...

OpenOffice < 2.4.1 rtl_allocateMemory() Function Crafted Document Handling Integer Overflow

The version of OpenOffice installed on the remote host reportedly contains an integer overflow vulnerability in 'rtlallocateMemory', a custom memory allocation function used by the application. If an attacker can trick a user on the affected system, he can leverage this issue to execute arbitrary...

SuSE 10 Security Update : PHP (ZYPP Patch Number 2152)

The inirestore method could be exploited to reset options set in the webserver config to their default values. CVE-2006-4625 The memory handling routines contained an integer overflow. CVE-2006-4812 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CVE-2006-2152

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when registerglobals is enabled, allows remote attackers to include arbitrary files via the phpbbrootpath parameter...

CVE-2006-2152

CVE-2006-2152 affects phpBB Advanced Guestbook 2.4.0 and earlier, where admin/addentry.php fails to sanitize input to the phpbb_root_path parameter before using it in PHP include(). This PHP remote file inclusion vulnerability arises when register_globals is enabled, allowing an unauthenticated a...

CVE-2002-2152

The CVE-2002-2152 entry concerns the Czech edition of Software602’s Web Server prior to 2002.0.02.0916. Affected component: web server software; vulnerability: remote attackers can gain administrator privileges by directly requesting /admin/, which is not password protected. Underlying cause: lac...

CVE-2004-2152

CVE-2004-2152 affects MediaWiki up to version 1.3.4 in the raw page output mode, enabling cross-site scripting (XSS) by injecting arbitrary script/HTML. The root cause is a vulnerability in how the raw output is handled, permitting remote script execution through crafted content. Public reference...

CVE-2002-2152

The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected...