Debian Security Advisory DSA 2253-1 (fontforge)

The remote host is missing an update to fontforge announced via advisory DSA 2253-1. OpenVAS Vulnerability Test $Id: deb22531.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2253-1 fontforge Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2011-2253

CVE-2011-2253 relates to an unspecified vulnerability in the Oracle Database Server Core RDBMS component (Oracle DB Server 10.2.0.3–11.2.0.2) that allows remote authenticated users to affect confidentiality, integrity, and availability, with impact linked to SYSDBA. The vulnerability is documente...

Debian DSA-2253-1 : fontforge - buffer overflow

Ulrik Persson reported a stack-based buffer overflow flaw in FontForge, a font editor. When processed a crafted Bitmap Distribution Format BDF FontForge could crash or execute arbitrary code with the privileges of the user running FontForge. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Fedora Update for perl-libwww-perl FEDORA-2010-15405

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Fedora Update for perl-libwww-perl FEDORA-2010-15405 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for perl-libwww-perl FEDORA-2010-15532

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Fedora Update for perl-libwww-perl FEDORA-2010-15532 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora 13 : perl-libwww-perl-5.837-2.fc13 (2010-15532)

Fix broken package dependencies CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header Note that Tenable Network Security has extracted the preceding description block...

Fedora 14 : perl-libwww-perl-5.837-2.fc14 (2010-15405)

Fix broken package dependencies CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header CVE-2010-2253 lwp-download now needs the -s option to honor the Content-Disposition header Note that Tenable Network Security has extracted the preceding description block...

FreeBSD Ports: p5-libwww

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandriva Update for perl-libwww-perl MDVSA-2010:167 (perl-libwww-perl)

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Mandriva Update for perl-libwww-perl MDVSA-2010:167 perl-libwww-perl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribu...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

CVE-2010-2253

CVE-2010-2253 affects libwww-perl’s lwp-download in versions before 5.835. A crafted filename via 3xx redirects or Content-Disposition can cause remote servers to create/overwrite dotfiles (e.g., in a home directory), potentially leading to arbitrary code execution. Affected component: lwp-downlo...

CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

CVE-2008-2253

CVE-2008-2253 affects Windows Media Player 11. A remote code execution vulnerability exists when specially crafted audio-only files are streamed from a Windows Media Server SSPL, due to a buffer overflow in WMP11. Exploitation requires a user to open the crafted file; impact could be full system ...

MS08-054: Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)

The remote host is running Windows Media Player 11. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, the attacker would need to set up a rogue audio file and send it to a victim on the...

CVE-2002-2253

CVE-2002-2253 affects Cyrus Sieve / libSieve 2.1.2 and earlier. The issue arises from multiple buffer overflows in code handling (1) long header names, (2) long IMAP flags, and (3) a script generating many errors that overflow the error string. This allows remote attackers to execute arbitrary co...

CVE-2007-2253

CVE-2007-2253 affects Exponent CMS 0.96.6 Alpha and earlier. The vulnerability is a path disclosure where remote attackers can obtain path information by directly requesting (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php. The connected documents provide these concrete affected...

CVE-2006-2253

PHP remote file inclusion vulnerability in visiblecountinc.php in Statit 4 060207 allows remote attackers to execute arbitrary PHP code via a URL in the statitpath parameter...

CVE-2006-2253

CVE-2006-2253 corresponds to a PHP remote file inclusion vulnerability in Statit 4 (060207), specifically in visible_count_inc.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the statitpath parameter. The NVD and related records confirm the impact as arbi...

CVE-2004-2253

Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a .. in the page parameter of the show command...

CVE-2004-2253

CVE-2004-2253 describes a directory traversal in SurgeLDAP’s web component. Affected: SurgeLDAP 1.0g and earlier. Issue: an attacker can exploit a ".." in the page parameter of the show command in user.cgi to read arbitrary files from the server. The connected documents corroborate this file-disc...