Mandriva Update for wget MDVSA-2010:170 (wget)

Check for the Version of wget OpenVAS Vulnerability Test Mandriva Update for wget MDVSA-2010:170 wget Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : wget (MDVSA-2010:170)

A vulnerability has been found and corrected in wget : GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a...

CVE-2010-2252

CVE-2010-2252 affects GNU Wget 1.12 and earlier, where a 3xx redirect process can cause a server-provided filename to be used for destination files, potentially leading to arbitrary file writes or code execution via dotfiles in a home directory. Connected docs confirm affected package versions an...

CVE-2008-2252

CVE-2008-2252 maps to a Windows kernel memory corruption vulnerability (Windows kernel memory input validation). The Affected Software includes Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista (Gold/SP1), and Server 2008. Root cause: the kernel improperly validates input passed from user ...

Windows Kernel Elevation of Privilege Vulnerability (954211)

This host is missing a critical security update according to Microsoft Bulletin MS08-061. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS08-061: Microsoft Windows Kernel Multiple Privilege Elevation (954211)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34406;...

CVE-2002-2252

The CVE-2002-2252 entry affects Thatware versions up to and including 0.5.0, with the vulnerability located in auth.inc.php. The root cause is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter. Impact is remote data manipulatio...

CVE-2007-2252

The CVE-2007-2252 entry describes a directory traversal in Exponent CMS, affecting iconspopup.php where the icodir parameter can be exploited with a .. payload to disclose sensitive information. Affected version(s): Exponent CMS 0.96.6 Alpha and earlier. Root cause is improper handling of user-su...

CVE-2004-2252

The CVE-2004-2252 vulnerability affects Astaro Security Linux firewall prior to 4.024. The issue arises because the firewall sends responses to SYN-FIN packets, enabling remote attackers to glean system information and craft targeted attacks. Affected products: Astaro Security Linux versions befo...

CVE-2005-2252

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTIONRMID cookie to the user ID...

CVE-2004-2252

The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...