USN-1875-1: OpenStack Keystone vulnerabilities

Eoghan Glynn and Alex Meade discovered that Keystone did not properly perform expiry checks for the PKI tokens used in Keystone. If Keystone were setup to use PKI tokens, a previously authenticated user could continue to use a PKI token for longer than intended. This issue only affected Ubuntu...

Ubuntu 12.10 / 13.04 : keystone vulnerabilities (USN-1875-1)

Eoghan Glynn and Alex Meade discovered that Keystone did not properly perform expiry checks for the PKI tokens used in Keystone. If Keystone were setup to use PKI tokens, a previously authenticated user could continue to use a PKI token for longer than intended. This issue only affected Ubuntu...

CVE-2011-2157

CVE-2011-2157 affects SmarterTools SmarterStats 6.0 web server. The Admin/frmEmailReportSettings.aspx and Admin/frmGeneralSettings.aspx pages generate web pages that contain e-mail addresses, allowing remote attackers to read the default values of form fields and disclose potentially sensitive in...

Debian DSA-2157-1 : postgresql-8.3, postgresql-8.4, postgresql-9.0 - buffer overflow

It was discovered that PostgreSQL's intarray contrib module does not properly handle integers with a large number of digits, leading to a server crash and potentially arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2010-2157

CA ARCserve Backup information disclosure (CVE-2010-2157) affects Windows: r11.5 SP4, r12.0 SP2, and r12.5 SP1. According to CA Security Notice CA20100603-01 (June 3, 2010), a vulnerability exists that could allow a local attacker to obtain sensitive information. The advisory lists affected produ...

CVE-2009-2157

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...

CVE-2009-2157

CVE-2009-2157 affects TorrentTrader Classic 1.09 and describes multiple SQL injection vulnerabilities across numerous PHP endpoints (e.g., account-inbox.php, delreq.php, admin-delreq.php, index.php, modrules.php, report.php, take-deletepm.php, takedelreport.php, takedelreq.php, takestaffmess.php,...

CVE-2009-2157

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8958...

EMC AlphaStor Library Manager Remote Code Execution

The installed instance of AlphaStor Library Manager is vulnerable to a command execution flaw when it receives a packet with a 0x44 code. Packet string argument is used unsanitized as a call to the 'system' function. An unauthenticated, remote attacker may be able to exploit this flaw to execute...

CVE-2008-2157

robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500...

DSquare Exploit Pack: D2SEC_ALPHASTOR_LM

Name| d2secalphastorlm ---|--- CVE| CVE-2008-2157 Exploit Pack| D2ExploitPack Description| EMC AlphaStor Library Manager Remote Command Execution Vulnerability Notes|...

CVE-2008-2157

robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified string field in a packet to TCP port 3500...

CVE-2008-2157

The provided connected documents confirm a remote command-execution vulnerability (CVE-2008-2157) in EMC AlphaStor products. The EMC AlphaStor Library Manager is vulnerable to arbitrary command execution via an unsanitized packet string argument that is processed by a system() call when handling ...

EMC AlphaStor库管理器任意命令执行漏洞

CVECAN ID: CVE-2008-2157 AlphaStor是用于管理磁盘的应用程序组件。 AlphaStor中库管理器（Library Manager）用于管理在分布的位置上替换磁盘驱动。该管理器由单个进程robotd组成，在TCP 3500端口上监听入站连接。 如果对库管理器发送了特殊请求的话，robotd会使用报文中的字符串在系统上通过CreateProcess函数执行命令，这允许攻击者在主机上以SYSTEM权限执行任意程序。 EMC AlphaStor 3.1 SP1 for Windows EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

CVE-2007-2157 describes a directory traversal vulnerability in the Zomplog 3.8 application, specifically in upload/force_download.php. An attacker can use a dot-dot (..) sequence in the file parameter to read arbitrary files. The NVD entry confirms the issue and lists a high impact potential for ...

CVE-2006-2157

CVE-2006-2157 targets Plogger Beta 2.1 and earlier, with a SQL injection in gallery.php via the id parameter when level is set to "slideshow". The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in the NVD entry and related records. Affected component: Plogge...

CVE-2002-2157

...

CVE-2004-2157

The CVE-2004-2157 entry describes a cross-site scripting (XSS) vulnerability in Serendipity 0.7 beta1 (and possibly earlier versions before 0.7-beta3) in the Comment.php component. The flaw allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field, impa...

CVE-2005-2157

The CVE-2005-2157 issue affects the nabopoll 1.2 PHP-based survey software. A vulnerability in survey.inc.php allows remote file inclusion via the path parameter, enabling an attacker to view arbitrary files on the server and potentially execute arbitrary PHP code by loading code from a remote ho...