101 matches found
Gentoo Security Advisory GLSA 200606-03 (dia)
The remote host is missing updates announced in advisory GLSA 200606-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-2480
PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the pagesdir parameter...
CVE-2008-2480
The data shows CVE-2008-2480 affects the plusPHP Short URL Multi-User Script 1.6, specifically the file plus.php. The vulnerability is a PHP remote file inclusion triggered through a URL in the _pages_dir parameter, allowing an attacker to execute arbitrary PHP code on the affected system. The co...
CVE-2008-2480
creationtimestamp| type| source ---|---|--- 2008-05-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5672...
openSUSE 10 Security Update : dia (dia-1435)
Format string bugs in dia could potentially be exploited to execute arbitrary code CVE-2006-2453, CVE-2006-2480. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dia-1435. The text description ...
CVE-2007-2480
The udplibgetport function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other application...
CentOS 4 : dia (CESA-2006:0541)
Updated Dia packages that fix several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. Several format string flaws were found in the w...
RHEL 4 : dia (RHSA-2006:0541)
Updated Dia packages that fix several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. Several format string flaws were found in the w...
security flaw
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...
Moderate: Red Hat Security Advisory: dia security update
Updated Dia packages that fix several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. Several format string flaws were found in the w...
Mandrake Linux Security Advisory : dia (MDKSA-2006:093)
A format string vulnerability in Dia allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...
Format string
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...
Ubuntu 5.04 / 5.10 : dia vulnerabilities (USN-286-1)
Several format string vulnerabilities have been discovered in dia. By tricking a user into opening a specially crafted dia file, or a file with a specially crafted name, this could be exploited to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted...
CVE-2006-2480
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...
CVE-2006-2480
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...
CVE-2006-2480
Dia (0.94) is affected by a format-string vulnerability (CVE-2006-2480) that could allow a remote attacker to cause a crash or potentially execute code by crafted input (e.g., a crafted .dia/.bmp filename). Several connected advisories confirm this issue and reference CVE-2006-2453 as well, with ...
CVE-2004-2480
CVE-2004-2480 affects Squid Web Proxy Cache 2.3.STABLE5. The vulnerability allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL processed by Internet Explorer. The provided materials do not specify root cause details, affected versions beyo...
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer...
CVE-2005-2480
The CVE-2005-2480 entry concerns Fusebox running on ColdFusion (Fusebox 4.1.0). The vulnerability is a cross-site scripting (XSS) flaw where the fuseaction parameter is not quoted in an error page, enabling an attacker to inject arbitrary script/HTML (demonstrated via index.cfm). Connected docume...
