152 matches found
CVE-2008-2945
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...
CVE-2008-2945
Technical details for CVE-2008-2945 are not provided in the connected documents; public disclosures and remediation are not covered here. Monitor for updates.
CVE-2008-2945
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...
Solaris 9 (sparc) : 117586-22
IS 6.1: Sun ONE Identity Server. Date this patch was last updated by Sun : Jan/17/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-2945
CVE-2007-2945 affects RMForum. The issue is insufficient access control that allows remote attackers to access the web root and download the RMForum database (rmforum.mdb) via a direct request. This leads to partial confidentiality impact by exposing sensitive data. The NVD entry assigns a CVSS v...
Solaris 5.9 (x86) : 120091-15
AM 6.2x86: Sun Java System Access Manager. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...
Solaris 9 (sparc) : 115766-15
AM 6.2: Sun Java System Access Manager. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
DEBIAN-CVE-2006-2945
Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, allows remote authenticated users to read unauthorized files via unknown attack vectors...
CVE-2006-2945
Technical details (affected components, versions, root cause, and remediation) are not publicly provided in the supplied documents; monitor for updates.
Debian DSA-843-1 : arc - insecure temporary file
Two vulnerabilities have been discovered in the ARC archive program under Unix. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2945 Eric Romang discovered that the ARC archive program under Unix creates a temporary file with insecure permissions...
CVE-2005-2945
CVE-2005-2945 affects the ARC archive utility (and ARC-derived ARC/ARCC variants) in Unix-like systems: ARC creates temporary files with world-readable permissions, allowing local users to read sensitive information. Related CVE-2005-2992 describes a symlink-based flaw that also involves insecure...