289 matches found
CVE-2008-3600
CVE-2008-3600 affects Gallery 1.5.7 and 1.6-alpha3. A directory traversal flaw in contrib/phpBB2/modules.php allows remote attackers to include and execute arbitrary local files through a .. in the phpEx parameter during a modload action, particularly when register_globals is enabled. This can le...
CVE-2007-3600
The vulnerability (CVE-2007-3600) affects vtiger CRM prior to 5.0.3, specifically the WordPlugin in the wordintegration component. An authenticated remote user can bypass field-level security permissions and merge arbitrary fields within an Email template, demonstrated by fields in the Contact mo...
SAP Message Server multiple buffer overflows
Buffer overflows in services on ports TCP/3600, TCP/8100 and others...
Mandrake Linux Security Advisory : libtunepimp (MDKSA-2006:126)
Kevin Kofler discovered multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp 0.4.2 that allow remote user-complicit attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3...
Debian DSA-1135-1 : libtunepimp - buffer overflow
Kevin Kofler discovered several stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp, a MusicBrainz tagging library, which allows remote attackers to cause a denial of service or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
[SECURITY] [DSA 1135-1] New libtunepimp packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1135-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...
CVE-2006-3466
CVE-2006-3466 is a reservation duplicate of CVE-2006-3600. Connected records provide concrete details for CVE-2006-3600: multiple stack-based buffer overflows in libtunepimp’s LookupTRM::lookup within TunePimp 0.4.2, allowing remote attackers to cause a denial of service (crash) and potentially e...
CVE-2006-3600
CVE-2006-3600 affects libtunepimp (TunePimp) 0.4.2, with multiple stack-based buffer overflows in LookupTRM::lookup that can allow remote attackers to cause a denial of service (crash) and possibly execute code. Public reports across Debian, Mandrake, Ubuntu, SUSE OpenVAS advisories describe thes...