Gentoo Security Advisory GLSA 200607-05 (shoutcast)

The remote host is missing updates announced in advisory GLSA 200607-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200710-02 (php)

The remote host is missing updates announced in advisory GLSA 200710-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3007

CVE-2008-3007 describes an argument-injection vulnerability in the OneNote URI handler (onenote://) affecting Microsoft Office OneNote 2007 (and related Office XP/2003/2007 versions). The root cause is a Uniform Resource Locator validation error in the OneNote URL handler that can be triggered by...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 3754)

The following issues have been fixed : - missing openbasedir and safemode restriction. CVE-2007-3007 - chunksplit integer overflow. CVE-2007-2872 - DoS condition in libgd's image processing. CVE-2007-2756 - possible super-global overwrite inside importrequestvariables. CVE-2007-1396 - buffer...

Fedora 7 : php-5.2.4-1.fc7 (2007-2215)

This update includes the latest release of PHP 5.2. A number of security issues have been fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

openSUSE 10 Security Update : php5 (php5-3753)

The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release : - missing openbasedir and safemode restriction CVE-2007-3007 - chunksplit integer overflow CVE-2007-2872 - DoS condition in libgd's image processing CVE-2007-2756 - possible...

CVE-2007-3007

PHP 5 before 5.2.3 does not enforce the openbasedir or safemode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function...

CVE-2006-3007

SHOUTcast 1.9.5 is affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary HTML or script via the DJ fields Description, URL, Genre, AIM, and ICQ. The core issue is input sanitization in these fields, enabling HTML/script injection on the client side. OpenVAS and ...

CVE-2005-3007

Opera before 8.50 is affected by a vulnerability where appending a trailing dot to a filename spoofed the content type, potentially tricking users into processing dangerous content. The issue concerns the browser’s handling of file-type presentation rather to content-type verification, enabling m...