Fedora 20 : cups-filters-1.0.53-1.fc20 (2014-5765)

This update fixes two flaws and various bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Updated cups-filters packages fix security vulnerability

Updated cups-filters packages fix security vulnerability: Sebastian Krahmer discovered it was possible to use malicious broadcast packets to execute arbitrary commands on a server running the cups- browsed daemon CVE-2014-2707. Note that only systems that have enabled the affected feature by usin...

CVE-2014-2707

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the 1 model or 2 PDL, related to "System V interface scripts generated for queues."...

CVE-2014-2707

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the 1 model or 2 PDL, related to "System V interface scripts generated for queues."...

CVE-2014-2707

CVE-2014-2707 affects cups-filters, specifically via cups-browsed’s handling of model/PDL in remote IPP printing. The issue allowed remote printers to execute arbitrary shell commands through shell metacharacters in the model or PDL, tied to System V interface scripts for queues. Affected version...

cups-filters cups-browsed OS命令注入漏洞

CVE ID:CVE-2014-2707 CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 cups-filters cups-browsed没有正确过滤打印机名和PDL的输入，允许攻击者利用漏洞提交恶意请求注入和执行任意shell命令。 0 cups-filters 1.x cups-filters 1.0.51版本已修复该漏洞，建议用户下载使用：...

Fedora Update for cups-filters FEDORA-2014-4708

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2707

Cross-site request forgery CSRF vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

CVE-2013-2707

CVE-2013-2707 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Login With Ajax, affecting versions before 3.1. The issue allows remote attackers to hijack the authentication of arbitrary users via requests that modify the plugin’s settings. Affected software: WordPress...

CVE-2012-2707

CVE-2012-2707 affects the Hostmaster (Aegir) Drupal module (6.x-1.x) prior to 6.x-1.9. The issue is that the module does not properly exit when users lack access to package/task nodes, allowing remote attackers to bypass access restrictions and edit unauthorized nodes. This is a server-side acces...

CVE-2011-2707

The CVE-2011-2707 entry affects the Linux kernel's arch/xtensa/kernel/ptrace.c, where the ptrace_setxregs() function does not validate user-space pointers. This allows a local user to read kernel memory via a crafted PTRACE_SETXTREGS request, as described for Linux kernel versions before 3.1. Pub...

Linux Kernel Xtensa "ptrace_setxregs()"内存泄露漏洞

CVE ID: CVE-2011-2707 Linux Kernel是Linux操作系统的内核。 Linux Kernel在实现上存在安全漏洞，可被本地攻击者利用泄露敏感信息。 由于arch/xtensa/kernel/ptrace.c 中的"ptracesetxregs"函数没有正确验证提供的指针，此漏洞可造成泄露内核内存。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

CVE-2010-2707

The CVE-2010-2707 entry applies to HP ProCurve 2626 and 2650 switches (pre-H.10.80). The Security Bulletin HPSBGN02560/SSRT100193 rev.1 documents a vulnerability enabling remote unauthorized access, data leakage, and potential DoS via unspecified vectors. Affected versions are prior to H.10.80 ac...

SuSE 10 Security Update : ia32el (ZYPP Patch Number 6466)

A 32bit x86 user program could crash the Itanium IA64 kernel in the IA 32 Intel 32bit emulation. CVE-2009-2707 Updating IA32EL to 70427022, the same version as shipped on SLES 10 SP3, fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CVE-2009-2707

The CVE-2009-2707 issue affects SUSE Linux Enterprise Server 10 SP2 on Itanium IA64, where the ia32el IA32 emulation layer can be leveraged by a local 32-bit x86 application to cause a kernel crash (DoS). The vulnerability is described as an unspecified defect in ia32el prior to version 7042_7022...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

Solaris 10 (x86) : 137293-02

SunOS 5.10x86: e1000g driver patch. Date this patch was last updated by Sun : Jul/15/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 137289-02

SunOS 5.10: e1000g driver patch. Date this patch was last updated by Sun : Jul/15/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2008-2707

CVE-2008-2707 affects the e1000g driver in Sun Solaris 10 and OpenSolaris prior to snv_93, causing remote DoS (network connectivity loss) via unknown vectors. Sun patch 137289-02 (SPARC) and 137293-02 (x86) address this issue. The vulnerability details are described as unspecified; no exploit inf...

Debian Security Advisory DSA 866-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 866-1. Several security-related problems have been discovered in Mozilla and derived programs. For details, please visit the referenced security advisories. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions...