115 matches found
SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:0805-1)
cups-filters was updated to fix one security issue. This security issue was fixed : - CVE-2015-2265: Remote command execution in removebadchars bnc921753. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding...
Mandriva Linux Security Advisory : cups-filters (MDVSA-2015:196)
Updated cups-filters package fixes security vulnerability : cups-browsed in cups-filters before 1.0.66 contained a bug in the removebadchars\ function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal characters, allowing execution of arbitrar...
MGASA-2015-0132 Updated cups-filters packages fix CVE-2015-2265
Updated cups-filters package fixes security vulnerability: cups-browsed in cups-filters before 1.0.66 contained a bug in the removebadchars function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal characters, allowing execution of arbitrary...
CVE-2015-2265
The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...
DEBIAN-CVE-2015-2265
The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...
CVE-2015-2265
The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...
CVE-2015-2265
The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...
CVE-2015-2265
CVE-2015-2265 affects cups-filters prior to 1.0.66. The vulnerability is in the remove_bad_chars function (utils/cups-browsed.c) where consecutive shell metacharacters in the model or PDL enable remote IPP printers to execute arbitrary commands. This issue exists due to an incomplete fix for CVE-...
[USN-2532-1] cups-filters vulnerability
========================================================================== Ubuntu Security Notice USN-2532-1 March 16, 2015 cups-filters vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...
Fedora 22 : cups-filters-1.0.66-1.fc22 (2015-2949)
New upstream bug-fix release which fixes a security flaw in cups-browsed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Ubuntu: Security Advisory (USN-2532-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : cups-filters-1.0.66-1.fc21 (2015-3036)
New upstream bug-fix release which fixes a security flaw in cups-browsed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora Update for cups-filters FEDORA-2015-3036
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for cups-filters FEDORA-2015-3003
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe ColdFusion FCKeditor Input Validation Flaw Arbitrary File Upload (CVE-2008-6178; CVE-2009-2265)
A vulnerability has been reported in Adobe Systems ColdFusion that could allow remote users to upload files in arbitrary directories potentially leading to a system compromise. The vulnerability is due to an input validation error in the FCKeditor which is embedded in ColdFusion 8. Remote attacke...
Ubuntu 14.04 LTS : NSPR vulnerability (USN-2265-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2265-1 advisory. Abhishek Arya discovered that NSPR incorrectly handled certain console functions. A remote attacker could use this issue to cause NSPR to crash, resulting in a...
Mozilla Suite/Firefox InstallVersion->compareTo() Code Execution
No description provided by source. $Id: mozillacompareto.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
ColdFusion 8.0.1 - Arbitrary File Upload and Execute
No description provided by source. $Id: coldfusionfckeditor.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
CVE-2014-2265
Rock Lobster/Contact Form 7 plugin for WordPress is affected in versions before 3.7.2. The issue is a CAPTCHA bypass where remote attackers can submit data by omitting the _wpcf7_captcha_challenge_captcha-719 parameter, effectively bypassing CAPTCHA protection. Root cause: CAPTCHA verification ca...