Debian: Security Advisory (DSA-1184-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-2660

PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the gpcltarlibdir parameter. NOTE: CVE...

CVE-2007-2660

CVE-2007-2660 describes a PHP remote file inclusion in the PclTar module (Vincent Blavet PhpConcept Library), exposed via the g_pcltar_lib_dir parameter in pcltrace.lib.php, used by CJG EXPLORER PRO 3.3 and similar products. Connected sources confirm the flaw allows arbitrary PHP code execution t...

[SECURITY] [DSA 1184-2] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-2 [email protected] http://www.debian.org/security/ Dann Frazier September 26th, 2006 http://www.debian.org/security/faq -...

CentOS 4 : kernel (CESA-2006:0617)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2006-2660

Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the...

CVE-2006-2660

Summary: CVE-2006-2660 is a buffer/path length vulnerability in PHP’s tempnam() related to long pathnames. Affected versions: PHP 5.1.4 and PHP 4.x prior to 4.4.3. Impact (as stated): Local users can bypass restrictions and create PHP files with fixed names in other directories due to MAXPATHLEN–...

CVE-2004-2660

CVE-2004-2660 is a vulnerability in the Linux kernel (2.6.x) where a memory leak in direct-io.c affects O_DIRECT write paths. Impact is local denial of service through memory consumption. The issue is fixed in the 2.6.10 update (as reflected by the ChangeLog-2.6.10 and related advisories); apply ...

Secure HyperText Transfer Protocol (S-HTTP) Detection

Detection of services supporting the Secure HyperText Transfer Protocol S-HTTP. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Vulnerabili...

Deprecated Secure HyperText Transfer Protocol (S-HTTP) Reporting

This web server supports the deprecated Secure HyperText Transfer Protocol S-HTTP, a cryptographic layer that was defined in 1999 by RFC 2660. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2005-2660

CVE-2005-2660 affects apachetop 0.12.5 and earlier. The vulnerability arises from insecure temporary file creation: atop.debug in the code path uses a fixed path and mode that allows a symlink attack to overwrite or create arbitrary files with the privileges of the user running apachetop. The Deb...

Secure HyperText Transfer Protocol (S-HTTP) Detection

The remote web server accepts connections encrypted using Secure HyperText Transfer Protocol S-HTTP, a cryptographic layer that was defined in 1999 by RFC 2660 and never widely implemented. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11720; scriptversion "1.20";...