Gentoo Security Advisory GLSA 200508-09 (bluez-utils)

The remote host is missing updates announced in advisory GLSA 200508-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2547

CVE-2008-2547 describes a stack-based buffer overflow in Microsoft Windows Installer’s msiexec.exe. The vulnerable components are msiexec.exe versions 3.1.4000.1823 and 4.5.6001.22159, where a long GUID value for the /x (uninstall) option can allow a context-dependent attacker to execute arbitrar...

CVE-2007-2547

The CVE-2007-2547 entry concerns SunShop Shopping Cart 4.0 (TurnkeyWebTools). A cross-site scripting (XSS) vulnerability exists in index.php, exploitable via the l parameter to inject arbitrary web script or HTML. The connected sources confirm the affected component and parameter but do not provi...

CVE-2006-2547

CVE-2006-2547 affects SAP with Informix, specifically the sapdba command. The vulnerability arises from insecure environment variable handling, enabling local users to run arbitrary commands via unknown vectors. Affected scope is SAP Informix deployments before version 700 and 700 up to patch 100...

CVE-2004-2548

Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...

CVE-2004-2547

NetWin SurgeMail (before 2.0c) and NetWin WebMail expose sensitive information through HTTP error handling. Requests to the root ("/"), to "/scripts/", or to a non-existent file can cause error messages that reveal the server path. This vulnerability is described as an information disclosure affe...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2005:150)

A vulnerability in bluez-utils was discovered by Henryk Plotz. Due to missing input sanitizing, it was possible for an attacker to execute arbitrary commands supplied as a device name from the remote bluetooth device. The updated packages have been patched to correct this problem. %NASLMINLEVEL...

[SECURITY] [DSA 782-1] New bluez-utils packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 782-1 [email protected] http://www.debian.org/security/ Martin Schulze August 23rd, 2005 http://www.debian.org/security/faq -...

Debian DSA-782-1 : bluez-utils - missing input sanitising

Henryk Plotz discovered a vulnerability in bluez-utils, tools and daemons for Bluetooth. Due to missing input sanitising it is possible for an attacker to execute arbitrary commands supplied as device name from the remote device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

CVE-2005-2547

security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper...

CVE-2005-2547

CVE-2005-2547 affects BlueZ bluez-utils/hcid components. The advisory describes missing input sanitisation in security.c in hcid, enabling remote attackers to execute arbitrary commands by supplying shell metacharacters in the Bluetooth device name during PIN helper invocation. Affected products/...

CVE-2004-2547

NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to obtain sensitive information via HTTP requests that a specify the / URI, b specify the /scripts/ URI, or c specify a non-existent file, which reveal the path in an error message...