CVE-2013-2582

CVE-2013-2582 affects Open-Xchange Server 6 / OX AppSuite. The vulnerability is a CRLF injection in the redirect servlet caused by insufficient whitespace sanitization, enabling attackers to inject HTTP headers and perform open redirects. Affected fixed versions per vendor advisory: 6.22.0-rev15,...

Open-Xchange Security Advisory 2013-04-17

Open-Xchange Security Advisory multiple vulnerabilities Multiple security issues for Open-Xchange Server 6 and OX AppSuite have been discovered and fixed. The vendor has chosen a responsible full disclosure method to publish security issue details. Users of the software have already been provided...

[SECURITY] [DSA 2536-1] otrs2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2536-1 [email protected] http://www.debian.org/security/ Florian Weimer August 30, 2012 http://www.debian.org/security/faq -...

CVE-2012-2582

CVE-2012-2582 details multiple XSS vulnerabilities in OTRS/OTRS ITSM. A remote attacker can inject arbitrary script via an email body using (1) CSS in STYLE attributes or (2) UTF-7 in an HTTP-EQUIV=CONTENT-TYPE META element. Affected: OTRS/OTRS ITSM releases where 2.4.x < 2.4.13, 3.0.x < 3....

Open Technology Real Services cross-site scripting vulnerability

Overview Open Technology Real Services OTRS is susceptible to a cross-site scripting vulnerability. Description Open Technology Real Services OTRS contains a cross-site scripting CWE-79 vulnerability in the email body. An attacker may be able to load arbitrary script in the context of the user's...

CVE-2012-2582

creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20359...

Secunia Research: Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability

====================================================================== Secunia Research 29/10/2010 - Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2010-2582

An unspecified function in TextXtra.x32 in Adobe Shockwave Player before 11.5.9.615 does not properly reallocate a buffer when processing a DEMX chunk in a Director file, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code...

CVE-2010-2582

CVE-2010-2582 affects Adobe Shockwave Player (Windows/macOS) via a heap-based buffer overflow in the TextXtra.x32 DEMX chunk parsing, caused by a failure to reallocate a buffer to fit chunk data. Public docs consistently describe this as a vulnerability that allows remote code execution if a craf...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...

CVE-2008-2582

CVE-2008-2582 affects Oracle/BEA WebLogic Server (BEA Product Suite) versions 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, and 10.0 MP1. The initial description notes an unspecified vulnerability with unknown impact and remote attack vectors; the connected BEA/Oracle entries list the WebLogic components ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2582. Reason: This candidate is a duplicate of CVE-2007-2582. Notes: All CVE users should reference CVE-2007-2582 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5324

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2582. Reason: This candidate is a duplicate of CVE-2007-2582. Notes: All CVE users should reference CVE-2007-2582 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5324

Mode C: Affected software is IBM DB2 (DB2JDS) with service listening on TCP/6789. CVE-2007-2582 (and thus CVE-2007-5324) describe multiple buffer overflows in the DB2JDS (DB2 JDBC Applet Server) allowing remote code execution and DoS via crafted packets or invalid LANG parameter/packet length &gt...

Immunity Canvas: DB2_JDBC

Name| db2jdbc ---|--- CVE| CVE-2007-2582 Exploit Pack| CANVAS Description| IBM DB2 JDBC Applet Server Overflow Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-07-056.html CVE Name: CVE-2007-2582 VENDOR: IBM Notes: Repeatability: Date public: 10/10/07 CVE Url:...

CVE-2007-2582

The IBM DB2JDS vulnerability (CVE-2007-2582) in IBM DB2 9.x and earlier allows remote code execution via a crafted packet to the DB2JDS service on TCP port 6789, and also DoS through an invalid LANG parameter or an oversized packet causing a MemTree overflow. IBM TRIRIGA Application Platform is n...

CVE-2006-2594

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2582. Reason: This candidate is a duplicate of CVE-2006-2582. Notes: All CVE users should reference CVE-2006-2582 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-2582

The CVE-2006-2582 entry concerns RWiki (versions around 2.1.0pre1 through 2.1.0) where the editing form allows remote attackers to execute arbitrary Ruby code. The underlying issue is in the edit functionality, enabling code execution on the server with the privileges of the RWiki process. The pr...

CVE-2004-2582

The vulnerability CVE-2004-2582 affects Novell iChain 2.3. The issue is that the proxy server’s HTTP VIA header line reveals the build number, enabling remote attackers to obtain sensitive information. The available documents confirm the affected product and the root cause (build number disclosur...

CVE-2005-2582

Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 has world-writable permissions on the log and license directories, enabling local users to delete log files, perform a symlink attack to kavmonitor.log (append to arbitrary files), or delete license keys and disrupt keepup2date. The connected...