CVE-2009-3124

CVE-2009-3124 describes a directory traversal vulnerability in QuarkMail's get_message.cgi that allows an attacker to read arbitrary files by injecting a .. in the tf parameter. Multiple connected sources (Red Hat, NVD, CVE records, and related feeds) reiterate that the flaw affects QuarkMail and...

CVE-2009-3124

creationtimestamp| type| source ---|---|--- 2009-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34875...

Fedora Update for openldap FEDORA-2007-3124

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200609-01 (streamripper)

The remote host is missing updates announced in advisory GLSA 200609-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3124

CVE-2008-3124 : A SQL injection vulnerability exists in index.php of Mole Group Hotel Script 1.0, allowing remote attackers to inject arbitrary SQL commands via the file parameter. Affected software is Mole Group Hotel Script 1.0 (index.php). The vulnerability enables partial confidentiality, int...

CVE-2008-3124

creationtimestamp| type| source ---|---|--- 2008-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6021...

CVE-2007-3124

CVE-2007-3124: Affected software is FreeVMS (backup utility), vulnerable through the backup/src/vmsbackup.c buffer overflow prior to 0.3.6. A local user could exploit a long string in response to an "extract [ny]" prompt to gain privileges. Documented impact is local privilege escalation with par...

[SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1158-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 25th, 2006 http://www.debian.org/security/faq -...

CVE-2006-3124

CVE-2006-3124 describes a buffer overflow in Streamripper’s HTTP header parsing (lib/http.c) that could be triggered by crafted HTTP headers, potentially leading to denial of service or arbitrary code execution. ConnectedOpenVAS entries and Debian/OSS advisories reference Streamripper and corrobo...

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3124

CVE-2005-3124 affects the syslogtocern script in Acme thttpd prior to 2.23, enabling local attackers to overwrite arbitrary files via a symlink attack on a temporary file. Public advisories (Debian DSA-883-1, SUSE, Ubuntu, OpenVAS/Nessus entries) describe insecure temporary-file handling in thttp...

[SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 883-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...