Debian DSA-2096-1 : zope-ldapuserfolder - missing input validation

Jeremy James discovered that in LDAPUserFolder, a Zope extension used to authenticate against an LDAP server, the authentication code does not verify the password provided for the emergency user. Malicious users that manage to get the emergency user login can use this flaw to gain administrative...

[SECURITY] [DSA 2096-1] New zope-ldapuserfolder packages fix authentication bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-2096-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 24, 2010 http://www.debian.org/security/faq -...

CVE-2010-2944

CVE-2010-2944 affects zope-ldapuserfolder (LDAPUserFolder/LDAPUserFolder.py) with version 2.9-1, where the authentication code does not verify the emergency account password. This allows remote attackers to gain privileges on the Zope instance. Debian’s DSA-2096-1 fixes the issue by upgrading to ...

CVE-2010-2944

The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges...

Fedora Update for ikiwiki FEDORA-2010-4933

Check for the Version of ikiwiki OpenVAS Vulnerability Test Fedora Update for ikiwiki FEDORA-2010-4933 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Debian DSA-1875-1 : ikiwiki - missing input sanitising

Josh Triplett discovered that the blacklist for potentially harmful TeX code of the teximg module of the Ikiwiki wiki compiler was incomplete, resulting in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora Core 11 FEDORA-2009-9244 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9244. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-9244 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9244. OpenVAS Vulnerability Test $Id: fcore20099244.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9244 ikiwiki Authors: Thomas Reinke Copyright: Copyright c 2009...

FreeBSD Ports: ikiwiki

The remote host is missing an update to the system as announced in the referenced advisory. VID 6e8f54af-a07d-11de-a649-000c2955660f OpenVAS Vulnerability Test $ Description: Auto generated from VID 6e8f54af-a07d-11de-a649-000c2955660f Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-9254 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9254. OpenVAS Vulnerability Test $Id: fcore20099254.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9254 ikiwiki Authors: Thomas Reinke Copyright: Copyright c 2009...

FreeBSD Ports: ikiwiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Core 10 FEDORA-2009-9254 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory FEDORA-2009-9254. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora 10 : ikiwiki-2.72-2.fc10 (2009-9254)

Fix CVE-2009-2944, see bz 520543. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

FreeBSD : ikiwiki -- insufficient blacklisting in teximg plugin (6e8f54af-a07d-11de-a649-000c2955660f)

The IkiWiki development team reports : IkiWikis teximg plugin's blacklisting of insecure TeX commands is insufficient; it can be bypassed and used to read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

ikiwiki teximg插件不安全TeX命令信息泄露漏洞

BUGTRAQ ID: 36181 CVECAN ID: CVE-2009-2944 Ikiwiki是一个wiki编译器，可将wiki页面转换为可在网站发布的HTML页面。 Ikiwiki的teximg插件没有正确地将不安全的TeX命令加入到黑名单，本地攻击者可以使用这个命令读取系统上的任意文件内容。 ikiwiki 2.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1875-1）以及相应补丁: DSA-1875-1：New ikiwiki packages fix information disclosure...

DEBIAN-CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...

CVE-2009-2944

The CVE-2009-2944 entry concerns an incomplete blacklist in the teximg plugin of ikiwiki, allowing context-dependent attackers to read arbitrary files via crafted TeX commands. Affected software is ikiwiki with the teximg plugin, specifically versions before 3.1415926 and before 2.53.4 of the 2.x...

CVE-2008-2944

CVE-2008-2944 describes a double-free vulnerability in the Linux kernel’s utrace support, likely affecting 2.6.18-era builds, reported in Red Hat Enterprise Linux 5 and Fedora Core 6. Impact: local users can trigger a denial of service (o o p s) via a crash when running the GNU GDB testsuite; thi...

CVE-2008-2944

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux RHEL 5 and Fedora Core 6 FC6 allows local users to cause a denial of service oops, as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than...

CVE-2007-2944

CVE-2007-2944 concerns WabCMS 1.0, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database via a direct request to db/wabcmsn.mdb. The note indicates the issue was originally reported for “webCMS,” but this was an e...