Debian DSA-1930-1 : drupal6 - several vulnerabilities

Several vulnerabilities have been found in drupal6, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2372 Gerhard Killesreiter discovered a flaw in the way user signatures are handled. It is possible for...

SlimFTPd LIST Concatenation Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SlimFTPd LIS...

[SECURITY] [DSA 1930-1] New drupal6 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1930-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 07, 2009 http://www.debian.org/security/faq -...

FreeBSD Ports: drupal5

The remote host is missing an update to the system as announced in the referenced advisory. VID be927298-6f97-11de-b444-001372fd0af2 OpenVAS Vulnerability Test $ Description: Auto generated from VID be927298-6f97-11de-b444-001372fd0af2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-2373

Cross-site scripting XSS vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2373

Drupal 6.x: The Forum module is vulnerable to Cross-Site Scripting (XSS) via unspecified vectors, affected up to version 6.12/6.13 (per description: before 6.13). This allows remote attackers to inject arbitrary web script or HTML. Connected advisories confirm CVE-2009-2373 and reference Drupal f...

CVE-2008-2373

The CVE-2008-2373 entry is a reservation duplicate of CVE-2008-2863. Connected sources confirm a real vulnerability in eLineStudio Site Composer (ESC) 2.6: multiple absolute path traversal vulnerabilities enabling remote attackers to create or delete arbitrary directories via the inpCurrFolder pa...

CVE-2008-2373

...

CVE-2007-2373

The provided connected documents confirm a concrete vulnerability: WF-Links (wflinks) module for XOOPS, version 1.03 and earlier, contains an SQL injection in viewcat.php. The flaw allows remote attackers to manipulate the cid parameter to execute arbitrary SQL commands on the backend. The affect...

Microsoft Windows - CanonicalizePathName() Remote (MS06-040)

Microsoft Windows - CanonicalizePathName Remote MS06-040 / Microsoft Windows CanonicalizePathName Remote Overflow MSO6-040 More info: http://www.microsoft.com/technet/security/bulletin/MS06-040.mspx Written by Preddy This is another version of hdm's metasploit version but ported to C, Works again...

CVE-2006-2373

CVE-2006-2373 : A local elevation-of-privilege in the SMB driver MRXSMB.SYS on affected Windows versions (Windows 2000 SP4, XP SP1/SP2, Server 2003 SP1 and earlier). The vulnerability arises from a logic/validation error in MRxSmbCscIoctlOpenForCopyChunk where, when invoked with METHOD_NEITHER, a...

CVE-2006-2373

The Server Message Block SMB driver MRXSMB.SYS in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHODNEITHER method flag and an arbitrary address, possibly f...

MS06-030: Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389)

The remote version of Windows contains a version of SMB Server Message Block protocol that is affected by several vulnerabilities. An attacker may exploit these flaws to elevate his privileges and gain control of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

SlimFTPd LIST Concatenation Overflow

This module exploits a stack buffer overflow in the SlimFTPd server. The flaw is triggered when a LIST command is received with an overly-long argument. This vulnerability affects all versions of SlimFTPd prior to 3.16 and was discovered by Raphael Rigo. This module requires Metasploit:...

CVE-2004-2373

Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.

CVE-2005-2373

Summary: CVE-2005-2373 affects SlimFTPd, with a buffer overflow in 3.15 and 3.16 triggered by long directory names in certain FTP commands (LIST, and commonly cited DELE/RNFR). The flaw allows remote code execution and requires authenticated access. Root cause: insufficient bounds checking on com...

CVE-2004-2373

The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...

Opera < 7.55.0 Cross-Domain Dialog Box Spoofing

Binary data 2373.prm...