CVE-2013-2776

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the ttytickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another...

CVE-2013-2776

CVE-2013-2776 affects sudo versions 1.3.5–1.7.10p5 and 1.8.0–1.8.6p6, where, on systems without /proc or with tty_tickets enabled, sudo fails to properly validate the controlling terminal. This allows a local user with sudo permissions to hijack another user’s authorization by interacting with th...

CVE-2013-2776

sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the ttytickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another...

CVE-2012-2776

Unspecified vulnerability in the decodecelldata function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."...

CVE-2012-2776

CVE-2012-2776 affects FFmpeg before 0.11 and Libav before 0.8.4, specifically the decode_cell_data path in libavcodec/indeo3.c. The vulnerability involves an out-of-bounds write in the Indeov3 decoding, with high-severity impact (C, I, A) and network attack vector per NVD metrics. The issue is ti...

Debian Security Advisory DSA 2383-1 (super)

The remote host is missing an update to super announced via advisory DSA 2383-1. OpenVAS Vulnerability Test $Id: deb23831.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2383-1 super Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-2776

CVE-2011-2776 describes a buffer overflow in the Error function of the Super project (version 3.30.0) caused by the syslog logging path, allowing local users to execute arbitrary code. Multiple sources confirm the root cause in super.c and the impact is local code execution with partial confident...

[SECURITY] [DSA 2383-1] super security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2383-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2383-1] super security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2383-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2012 http://www.debian.org/security/faq -...

CVE-2009-2776

creationtimestamp| type| source ---|---|--- 2009-08-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34687...

CVE-2009-2776

CVE-2009-2776 is a SQL injection vulnerability affecting Smart ASP Survey’s showresult.asp, exploitable via the catid parameter to execute arbitrary SQL commands remotely. Public records consistently describe the flaw as a SQL injection in showresult.asp, with no additional details on patched ver...

Gentoo Security Advisory GLSA 200703-05 (mozilla)

The remote host is missing updates announced in advisory GLSA 200703-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)

The remote host is missing updates announced in advisory GLSA 200606-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2776

The CVE-2008-2776 entry describes a Cross-site scripting (XSS) vulnerability in DT Centrepiece 4.0, located in search.asp and exploitable via the searchFor parameter. The underlying issue is a failure to properly neutralize user-supplied input, enabling remote attackers to inject arbitrary web sc...

Debian Security Advisory DSA 1120-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1120-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian: Security Advisory (DSA-1118)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1134-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1134-1. Several security related problems have been discovered in Mozilla which are also present in Mozilla Thunderbird. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test...

Debian Security Advisory DSA 1118-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 1118-1. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1118-1 Authors: Thomas...

Ubuntu 5.04 / 5.10 : mozilla vulnerabilities (USN-323-1)

Jonas Sicking discovered that under some circumstances persisted XUL attributes are associated with the wrong URL. A malicious website could exploit this to execute arbitrary code with the privileges of the user. MFSA 2006-35, CVE-2006-2775 Paul Nickerson discovered that content-defined setters o...

Ubuntu 5.04 / 5.10 : mozilla-thunderbird vulnerabilities (USN-297-3)

USN-297-1 fixed several vulnerabilities in Thunderbird for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN : Jonas Sicking discovered that under some circumstances persisted XUL...