95 matches found
openSUSE Security Update : tomcat6 (tomcat6-2000)
This update of tomcat5/6 fixes : - CVE-2009-2693: CVSS v2 Base Score: 5.8 CVE-2009-2902: CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. - CVE-2009-2901: CVSS v2 Base Score: 4.3 When...
CVE-2009-2693
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...
CVE-2009-2693
Apache Tomcat contains a directory-traversal flaw (CVE-2009-2693) affecting Tomcat 5.5.0–5.5.28 and 6.0.0–6.0.20. An attacker can cause creation or overwrite of arbitrary files by including a .. path in a WAR entry, for example ../../bin/catalina.bat. The connected documents reiterate this exact ...
Apache Tomcat < 5.5.29 / 6.0.24
Binary data 800619.prm...
FreeBSD Security Advisory (FreeBSD-SA-05:20.cvsbug.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:20.cvsbug.asc ADV FreeBSD-SA-05:20.cvsbug.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
CVE-2008-2693
The CVE-2008-2693 issue is a stack-based overflow in the BITIFF.BITiffCtrl.1 ActiveX control (BITiff.ocx 10.9.3.0) used by Black Ice Barcode SDK 5.01. An attacker can cause remote code execution by supplying a long first argument to SetByteOrder, triggering overflow in the ActiveX control. Affect...
CVE-2004-2693
The CVE-2004-2693 entry affects HP-UX B.11.00/11.11 when B6848AB GTK+ Support Libraries are installed, due to insecure directory permissions in /opt/gnome/src/GLib/. Local users could privilege themselves via files there. Exploitation details are not provided in the documents. No remediation deta...
CentOS 3 / 4 : cvs (CESA-2005:756)
An updated cvs package that fixes a security bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is...
CVE-2006-2693
CVE-2006-2693 is a directory-traversal vulnerability in Nivisec Hacks List
Debian DSA-806-1 : gcvs - insecure temporary files
Marcus Meissner discovered that the cvsbug program from gcvs, the Graphical frontend for CVS, which serves the popular Concurrent Versions System, uses temporary files in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
RHEL 4 : cvs (RHSA-2005:756)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:756 advisory. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is possible that a loc...
Low: Red Hat Security Advisory: cvs security update
An updated cvs package that fixes a security bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is...
CVE-2005-2693
cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack...
CVE-2005-2693
CVE-2005-2693 affects CVS (cvsbug) and was caused by insecure temporary-file handling in cvsbug, allowing a local attacker to overwrite arbitrary files and potentially execute code via a symlink attack on CVS versions 1.12.12 and earlier. The vulnerability impact includes partial confidentiality,...
