[SECURITY] [DSA 2484-1] nut security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2484-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 02, 2012 http://www.debian.org/security/faq -...

CVE-2012-2944

Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools NUT before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service electric-power outage via a long string containing non-printable characters...

CVE-2012-2944

The CVE-2012-2944 vulnerability affects Network UPS Tools (NUT) upsd. A buffer overflow in the addchar() function of parseconf.c can be triggered by a long string containing non-printable characters, allowing a remote attacker to cause arbitrary code execution or a denial of service. Affected: NUT

Ubuntu: Security Advisory (USN-1456-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The Uploader 2.0.4 (Eng/Ita) Remote File Upload Remote Code Execution

Exploit for php platform in category web applications require 'msf/core' class Metasploit3 'The Uploader 2.0.4 Eng/Ita Remote File Upload', 'Description'= %q This module exploits various flaws in The Uploader to upload a PHP payload to target system. When run with defaults it will search possible...

Debian DSA-2096-1 : zope-ldapuserfolder - missing input validation

Jeremy James discovered that in LDAPUserFolder, a Zope extension used to authenticate against an LDAP server, the authentication code does not verify the password provided for the emergency user. Malicious users that manage to get the emergency user login can use this flaw to gain administrative...

[SECURITY] [DSA 2096-1] New zope-ldapuserfolder packages fix authentication bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-2096-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 24, 2010 http://www.debian.org/security/faq -...

CVE-2010-2944

The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges...

CVE-2010-2944

CVE-2010-2944 affects zope-ldapuserfolder (LDAPUserFolder/LDAPUserFolder.py) with version 2.9-1, where the authentication code does not verify the emergency account password. This allows remote attackers to gain privileges on the Zope instance. Debian’s DSA-2096-1 fixes the issue by upgrading to ...

Fedora Update for ikiwiki FEDORA-2010-4933

Check for the Version of ikiwiki OpenVAS Vulnerability Test Fedora Update for ikiwiki FEDORA-2010-4933 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Debian DSA-1875-1 : ikiwiki - missing input sanitising

Josh Triplett discovered that the blacklist for potentially harmful TeX code of the teximg module of the Ikiwiki wiki compiler was incomplete, resulting in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora Core 10 FEDORA-2009-9254 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9254. OpenVAS Vulnerability Test $Id: fcore20099254.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9254 ikiwiki Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-9244 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9244. OpenVAS Vulnerability Test $Id: fcore20099244.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9244 ikiwiki Authors: Thomas Reinke Copyright: Copyright c 2009...

FreeBSD Ports: ikiwiki

The remote host is missing an update to the system as announced in the referenced advisory. VID 6e8f54af-a07d-11de-a649-000c2955660f OpenVAS Vulnerability Test $ Description: Auto generated from VID 6e8f54af-a07d-11de-a649-000c2955660f Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-9254 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9254. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-9244 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9244. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

FreeBSD Ports: ikiwiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 10 : ikiwiki-2.72-2.fc10 (2009-9254)

Fix CVE-2009-2944, see bz 520543. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

FreeBSD : ikiwiki -- insufficient blacklisting in teximg plugin (6e8f54af-a07d-11de-a649-000c2955660f)

The IkiWiki development team reports : IkiWikis teximg plugin's blacklisting of insecure TeX commands is insufficient; it can be bypassed and used to read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

ikiwiki teximg插件不安全TeX命令信息泄露漏洞

BUGTRAQ ID: 36181 CVECAN ID: CVE-2009-2944 Ikiwiki是一个wiki编译器，可将wiki页面转换为可在网站发布的HTML页面。 Ikiwiki的teximg插件没有正确地将不安全的TeX命令加入到黑名单，本地攻击者可以使用这个命令读取系统上的任意文件内容。 ikiwiki 2.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1875-1）以及相应补丁: DSA-1875-1：New ikiwiki packages fix information disclosure...