CVE-2012-2319

CVE-2012-2319 refers to multiple buffer overflows in the Linux kernel’s hfsplus filesystem implementation, exploitable locally to gain privileges via a crafted HFS+ filesystem. Affected: Linux kernel before 3.3.5. Root cause: buffer overflow in hfsplus code (related to CVE-2009-4020). Impact, as ...

CVE-2012-2319

Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020...

CVE-2012-2319

Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020...

Linux Kernel 3.3.x <= 3.3.4 Buffer overflow in HFS plus filesystem

Exploit for linux platform in category local exploits Affected product: Linux Kernel 3.3.x = 3.3.4 2.6.x = 2.6.35.13 Impact: code execution / privilege escalation Origin: HFS plus file system Credit: Timo Warns PRESENSE Technologies GmbH CVE Identifier: CVE-2012-2319 Summary ------- The Linux...

CVE-2011-2319

CVE-2011-2319 affects Oracle WebLogic Server within Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0. The vulnerability (described as unspecified) relates to JMS and can allow remote attackers to affect confidentiality. The linked sources do not provide a concrete root...

Debian Security Advisory DSA 2319-1 (policykit-1)

The remote host is missing an update to policykit-1 announced via advisory DSA 2319-1. OpenVAS Vulnerability Test $Id: deb23191.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2319-1 policykit-1 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2319-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2319-1 : policykit-1 - race condition

Neel Mehta discovered that a race condition in Policykit, a framework for managing administrative policies and privileges, allowed local users to elevate privileges by executing a setuid program from pkexec. The oldstable distribution lenny does not contain the policykit-1 package. %NASLMINLEVEL...

CVE-2010-2319

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-2319

CVE-2010-2319 affects IDevSpot TextAds 2.08. The vulnerability is a SQL injection in index.php where the attack vector is the page parameter , enabling remote attackers to execute arbitrary SQL commands. The sources consistently describe this as a SQLi vulnerability without detailing exploit step...

CVE-2009-2319

The CVE-2009-2319 entry concerns the Axesstel MV 410R Wi‑Fi component. The vulnerability stems from the default configuration which does not use encryption, enabling remote attackers to sniff network traffic and potentially obtain sensitive information. No further technical details (affected firm...

CVE-2002-2319

CVE-2002-2319 affects MySimpleNews: a static code injection vulnerability in users.php allows remote attackers to inject arbitrary PHP code and HTML via the LOGIN, DATA, and MESS parameters, which are inserted into news.php3. This indicates input handling flaws that enable arbitrary code executio...

CVE-2007-2319

PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to modascategory.php in 1 modules/modascategory/ or 2 modules/...

CVE-2007-2319

CVE-2007-2319 is a PHP remote file inclusion vulnerability in the AutoStand 1.1 (and earlier) Joomla! module, enabling remote code execution via a URL supplied to mosConfig_absolute_path in mod_as_category.php (two paths: modules/mod_as_category/ or modules/). The underlying issue is improper han...

CVE-2006-2319

CVE-2006-2319 affects Ideal Science Ideal BB 1.5.4a and earlier. The vulnerability arises from improper validation of file extensions before upload, allowing a remote attacker to insert a 0x00 character before the ".asp" portion of a filename to upload and execute an ASP script on the server. The...

CVE-2004-2319

IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 is affected. Two issues are described: (1) local users can create or overwrite files via the /001 log file to onedcu, and (2) local users can read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Root cause details are not ...

CVE-2005-2319

CVE-2005-2319 describes a PHP remote file include vulnerability in the Yawp library (version 1.0.6 and earlier) as used in YaWiki and potentially other products. The issue allows attackers to include arbitrary files via the parameter _Yawp[conf_path] . Affected software: Yawp library 1.0.6 and ol...

CVE-2004-2319

IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...