98 matches found
Gentoo Security Advisory GLSA 200510-04 (Texinfo)
The remote host is missing updates announced in advisory GLSA 200510-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Security Advisory (FreeBSD-SA-06:01.texindex.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:01.texindex.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
fujitsu-serverview-exec.txt
Advisory: Fujitsu-Siemens ServerView Remote Command Execution RedTeam Pentesting discovered a remote command execution in the Fujitsu- Siemens ServerView during a penetration test. The DBAsciiAccess CGI script is vulnerable to a remote command execution because of a parameter which is not properl...
CVE-2007-3011
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter...
CVE-2007-3011
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter...
CVE-2007-3011
Summary (concrete details): CVE-2007-3011 affects Fujitsu-Siemens ServerView prior to v4.50.09 where the DBAsciiAccess CGI script in the web interface processes the Servername subparameter of the ParameterList and fails to sanitize input, enabling remote command execution. An attacker can inject ...
Mac OS X Multiple Vulnerabilities (Security Update 2007-005)
The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2007-005 applied. This update fixes security flaws in the following applications : Alias Manager BIND CoreGraphics crontabs fetchmail file iChat mDNSResponder PPP ruby screen texinfo VPN C Tenable...
Debian DSA-1219-1 : texinfo - buffer overflow
Multiple vulnerabilities have been found in the GNU texinfo package, a documentation system for on-line information and printed output. - CVE-2005-3011 Handling of temporary files is performed in an insecure manner, allowing an attacker to overwrite any file writable by the victim. - CVE-2006-481...
Moderate texinfo security update
4.7-5.el4.2 - Fix CVE-2006-4810 211484 4.7-5.el4.1 - Fix CAN-2005-3011 169583...
[SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1219-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 27, 2006 - ------------------------------------------------------------------------ Package : texinfo...
RHEL 2.1 / 3 / 4 : texinfo (RHSA-2006:0727)
New Texinfo packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Texinfo is a documentation system that can produce both online information and printed output from a single source...
info, texinfo security update
CentOS Errata and Security Advisory CESA-2006:0727-01 New Texinfo packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Texinfo is a documentation system that can produce both onli...
error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 errorlog Safe Mode Bypass PHP 5.1.4 and 4.4.2 Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 10.6.2006 - -Public: 26.06.2006 from SECURITYREASON.COM CVE-2006-3011 - --- 0.Description --- PHP is an HTML-embedded scripting language. Much of i...
CVE-2006-3011
CVE-2006-3011 affects PHP up to 4.4.4 and 5.x up to 5.1.5, where error_log() can bypass safe_mode/open_basedir via a php:// scheme in the third argument. The SUSE Red Hat NVD entries confirm the safe_mode/open_basedir bypass in local contexts and identify error_log as the related vector. Ubuntu U...
CVE-2006-3011
The errorlog function in basicfunctions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and openbasedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode...
CVE-2005-3011
The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-3011
CVE-2005-3011 and related texinfo issues affect the GNU texinfo package up to version 4.8 and earlier, specifically in the texindex utility. The root cause is insecure handling of temporary files, allowing a local attacker to overwrite files writable by the victim via a symlink/temporary-file rac...