Fedora Core 11 FEDORA-2009-7794 (moin)

The remote host is missing an update to moin announced via advisory FEDORA-2009-7794. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian Security Advisory DSA 1836-1 (fckeditor)

The remote host is missing an update to fckeditor announced via advisory DSA 1836-1. OpenVAS Vulnerability Test $Id: deb18361.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1836-1 fckeditor Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 10 : wxGTK-2.8.10-2.fc10 / Fedora 11 : moin-1.8.4-2.fc11 (2009-7794)

The remote Fedora host is missing one or more security updates : moin-1.8.4-2.fc11 : This update removes the filemanager directory from the embedded FCKeditor, it contains code with know security vulnerabilities, even though that code couldn't be invoked when Moin was used with the default...

Fedora 10 : moin-1.6.4-3.fc10 (2009-7761)

This update removes the filemanager and samples directories from the embedded FCKeditor, they contain code with know security vulnerabilities, even though that code couldn't be invoked when Moin was used with the default settings. Moin was probably not affected, but installing this update is stil...

Mozilla Suite/Firefox compareTo() Code Execution

This module exploits a code execution vulnerability in the Mozilla Suite, Mozilla Firefox, and Mozilla Thunderbird applications. This exploit module is a direct port of Aviv Raff's HTML PoC. This module requires Metasploit: https://metasploit.com/download Current source:...

FCKeditor connectors模块多个跨站脚本及目录遍历漏洞

CVECAN ID: CVE-2009-2324,CVE-2009-2265 FCKeditor是一款开放源码的HTML文本编辑器。 FCKeditor没有正确地验证用户对多个connector模块所传送的输入，远程攻击者可以利用samples目录中的组件注入任意脚本或HTML，或通过目录遍历攻击上传恶意文件。 FCKeditor = 2.6.4 从editor\filemanager\connectors中删除不使用的连接器 在config.ext中禁用文件浏览器 完全删除samples目录 厂商补丁： FCKeditor ---------...

Immunity Canvas: FCKEDITOR

Name| FCKEditor ---|--- CVE| CVE-2009-2265 Exploit Pack| CANVAS Description| FCKEditor Notes| CVE Name: CVE-2009-2265 VENDOR: Known Vunlerable Versions: 'ColdFusion MX 8 - 8.01', 'osCMax =2.0', 'RunCMS =1.3a', 'Falt4 CMS', 'Many more to come!' Notes: This exploit has two different variants - one...

CVE-2009-2265

CVE-2009-2265 describes multiple directory traversal vulnerabilities in FCKeditor (embedded in Adobe ColdFusion 8) prior to 2.6.4.1, enabling remote attackers to create/executable files in arbitrary directories via traversal in input to unspecified connectors (notably filebrowser and editor/filem...

VulnCheck KEV: CVE-2009-2265

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009,...

[oCERT-2009-007] FCKeditor input sanitization errors

2009-007 FCKeditor input sanitization errors Description: FCKeditor, a web based open source HTML text editor, suffers from a remote file upload vulnerability. The input of several connector modules is not properly verified before being used, this leads to exposure of the contents of arbitrary...

Fedora Core 9 FEDORA-2009-2265 (curl)

The remote host is missing an update to curl announced via advisory FEDORA-2009-2265. OpenVAS Vulnerability Test $Id: fcore20092265.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2265 curl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Gentoo Security Advisory GLSA 200507-24 (mozilla)

The remote host is missing updates announced in advisory GLSA 200507-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...

CVE-2008-2265

CVE-2008-2265 describes a SQL injection in the EMO Realty Manager’s web frontend, specifically in news.php via the ida parameter. The underlying issue is improper sanitization of user-supplied input, allowing remote attackers to craft SQL commands that the application passes to the database. The ...

Debian Security Advisory DSA 779-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 779-1. Several problems have been discovered in Mozilla Firefox, a lightweight web browser based on Mozilla. For more details, please visit the referenced security advisory. The old stable distribution woody is not...

Debian Security Advisory DSA 781-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 781-1. Several problems have been discovered in Mozilla Thunderbird, the standalone mail client of the Mozilla suite. For more details, please visit the referenced security advisories. The old stable distributi...

Debian: Security Advisory (DSA-810-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2002-2265

CVE-2002-2265 affects Open Source Internet Solutions OSIS 5.4 on Tru64 UNIX 4.0G/4.0F, specifically the LDAP Module in System Authentication. The description states a vulnerability allowing remote attackers to gain access to arbitrary files or privileges via unknown attack vectors. No explicit ro...

CentOS 4 : thunderbird (CESA-2005:601)

Updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way...

CentOS 4 : firefox (CESA-2005:586)

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...