140 matches found
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : update-manager regression (USN-1284-2)
USN-1284-1 fixed vulnerabilities in Update Manager. One of the fixes introduced a regression for Kubuntu users attempting to upgrade to a newer Ubuntu release. This update fixes the problem. We apologize for the inconvenience. David Black discovered that Update Manager incorrectly extracted the...
Ubuntu升级管理器GPG签名校验安全绕过漏洞
CVE ID：CVE-2011-3152 Ubuntu是一款基于linux内核的发行版本。 David Black发现更新管理器Update Manager在校验GPG签名之前不正确提取下载的升级tarball，如果远程攻击者可执行中间人攻击，此缺陷可导致用于替换任意文件 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : update-manager vulnerabilities (USN-1284-1)
David Black discovered that Update Manager incorrectly extracted the downloaded upgrade tarball before verifying its GPG signature. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to replace arbitrary files. CVE-2011-3152 David Black...
USN-1284-1: Update Manager vulnerabilities
David Black discovered that Update Manager incorrectly extracted the downloaded upgrade tarball before verifying its GPG signature. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to replace arbitrary files. CVE-2011-3152 David Black...
Adobe Illustrator Path Subversion Arbitrary DLL Injection Code Execution (APSB10-29)
The version of Adobe Illustrator installed on the remote host is earlier than 15.0.2. Such versions insecurely look in their current working directory when resolving DLL and file dependencies, such as for 'aires.dll'. If a malicious DLL with the same name as a required DLL is located in the...
CVE-2010-3152
CVE-2010-3152 affects Adobe Illustrator CS4/CS5 (14.0.0, 15.0.1 and earlier). It is caused by an untrusted search path allowing DLL hijacking via a Trojan horse dwmapi.dll or aires.dll located in the same folder as an .ait/.eps file, enabling arbitrary code execution. Affected versions include CS...
CVE-2009-3152
CVE-2009-3152 affects NTSOFT BBS E-Market Professional (becommunity/community/index.php) with XSS vulnerabilities. The vulnerable vector involves user-controllable parameters in a board view action: page, bt_code, and b_no, allowing remote attackers to inject arbitrary script/HTML. The available ...
CVE-2009-3152
creationtimestamp| type| source ---|---|--- 2009-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33130...
CVE-2008-3152
The CVE-2008-3152 entry describes an SQL injection in directory.php affecting SmartPPC and SmartPPC Pro, exploitable via the idDirectory parameter to execute arbitrary SQL commands remotely. Public references (e.g., Exploit-DB entries) indicate availability of exploits, but the provided documents...
CVE-2008-3152
SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter...
CVE-2008-3152
creationtimestamp| type| source ---|---|--- 2008-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6014 2008-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6019...
FreeBSD : c-ares -- DNS Cache Poisoning Vulnerability (70ae62b0-16b0-11dc-b803-0016179b2dd5)
Secunia reports : The vulnerability is caused due to predictable DNS 'Transaction ID' field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
CVE-2007-3152
CVE-2007-3152 affects c-ares up to 1.4.0, where a predictable seed for the DNS Transaction ID RNG can allow remote attackers to guess IDs and spoof DNS responses. Affected: c-ares
CVE-2006-3152
Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 sectio parameter in a login.php, b writenewad.php, c newad.php, d printad.php, e askseller.php, f browse.php, g showmemberads.php, h notead.php, i abuse.php, ...
CVE-2006-3152
phpTRADER 4.9 SP5 and earlier is affected by multiple SQL injection vulnerabilities permitting remote attackers to execute arbitrary SQL commands via a set of parameters across login.php, write_newad.php, newad.php, printad.php, askseller.php, browse.php, showmemberads.php, note_ad.php, abuse.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the 3 redir, 4 productId, 5 docId, 6 act, and 7 catId parameters in index.php; and the 8 username field in a login action in index.php. NOTE: the cart.php/redi...
CubeCart < 3.0.4 Multiple Script XSS
The remote version of CubeCart contains several cross-site scripting vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. %NASLMINLEVEL 70300 Josh Zlatin-Amishav This script is released under the GNU GPLv2...
CVE-2005-3152
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to 1 cart.php or 2 index.php, or 3 the searchStr parameter in a viewCat action to index.php. Note: vectors 1 and 2 were later reported to affec...
CVE-2005-3152
CubeCart XSS vulnerabilities (CVE-2005-3152) affect CubeCart 3.0.3 and later reports show impact extending to 3.0.7-pl1. The issues arise from failure to properly sanitize user input in scripts such as index.php and cart.php, enabling remote attackers to inject arbitrary HTML/JavaScript. Exploita...