186 matches found
CVE-2008-3100
Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...
CVE-2008-3100
The CVE-2008-3100 issue affects Owl Intranet Knowledgebase/Engine (
Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100
Cross Site Scripting XSS in Owl =0.95, CVE-2008-3100 References: https://vulners.com/cve/CVE-2008-3100 http://owl.sourceforge.net/ http://www.datensalat.eu/fabian/cve/CVE-2008-3100-Owl.html Description: Owl is a multi user document repository knowledgebase system for publishing files/documents on...
owl-xss.txt
Cross Site Scripting XSS in Owl alert1; Workaround/Fix: Replace your owl.lib.php with the version from http://owl.cvs.sourceforge.net/checkout/owl/owl-0.90/lib/owl.lib.php Disclosure Timeline: 2008-07-27 Vendor contacted 2008-07-28 Vendor: fixed issue in cvs / no need for new stable release...
Debian Security Advisory DSA 1314-1 (open-iscsi)
The remote host is missing an update to open-iscsi announced via advisory DSA 1314-1. OpenVAS Vulnerability Test $Id: deb13141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1314-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1314-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 4035)
This update fixes some possible vulnerabilities in the open-iscsi daemon. CVE-2007-3099 / CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29533;...
openSUSE 10 Security Update : open-iscsi (open-iscsi-4034)
This update fixes insecure privileges and credential verification with the iscsi daemon. CVE-2007-3099, CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update open-iscsi-4034. The text...
openSUSE 10 Security Update : man (man-3100)
A heap based buffer overflow in the 'man' command could potentially be exploited by users to run code as root CVE-2006-4250. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update man-3100. The text...
Debian DSA-1314-1 : open-iscsi - several vulnerabilities
Several local and remote vulnerabilities have been discovered in open-iscsi, a transport-independent iSCSI implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3099 Olaf Kirch discovered that due to a programming error access to the...
DSA-1314-1 open-iscsi
Bulletin has no description...
CVE-2007-3100
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
CVE-2007-3100
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
CVE-2007-3100
CVE-2007-3100 affects open-iscsi (iscsi-initiator-utils) with iscsid before version 2.0-865. The vulnerability is due to a semaphore used for log messages in shared memory that is created with world-writable/world-readable permissions, allowing a local user to grab the semaphore and cause a denia...
dos flaws in open-iscsi (CVE-2007-3100)
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...
RHEL 5 : iscsi-initiator-utils (RHSA-2007:0497)
Updated iscsi-initiator-utils packages that fix a security flaw in open-iscsi are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The iscsi package provides the server daemon for the iSCSI protocol,...
CVE-2006-2653
Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...
CVE-2006-2653
Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...
CVE-2006-2653
CVE-2006-2653 is an XSS vulnerability in D-Link DSA-3100, specifically in login_error.shtml, allowing remote attackers to inject arbitrary HTML or web scripts via an encoded uname parameter. Affected product: D-Link DSA-3100; vulnerable component: login_error.shtml handling of uname; impact descr...