139 matches found
openSUSE Security Update : viewvc (viewvc-1420)
Update of viewvc to version 1.0.9 fixes a cross-site scripting XSS problem and enhances filtering of illegal characters when displaying error messages CVE-2009-3618, CVE-2009-3619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Fedora Core 10 FEDORA-2009-8501 (viewvc)
The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8501. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 11 FEDORA-2009-8507 (viewvc)
The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8507. OpenVAS Vulnerability Test $Id: fcore20098507.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8507 viewvc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Fedora Core 10 FEDORA-2009-8501 (viewvc)
The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8501. OpenVAS Vulnerability Test $Id: fcore20098501.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8501 viewvc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
CVE-2008-3619
CVE-2008-3619 affects Apple Mac OS X 10.5 through 10.5.4. The issue is weak permissions on Time Machine Backup log files, allowing local users to read logs and obtain sensitive information. The description does not specify affected hardware/versions beyond 10.5.x, nor provide a patch or workaroun...
Debian Security Advisory DSA 1170-1 (gcc-3.4)
The remote host is missing an update to gcc-3.4 announced via advisory DSA 1170-1. Jürgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. OpenVAS...
CVE-2007-3619
Maia Mailguard 1.0.2 and earlier contain a directory traversal (local file inclusion) in login.php, exploitable via .. in the lang parameter to read arbitrary files or potentially run PHP code. Affected component: login.php; vulnerability type: LFI via unsanitized lang input. Root cause: improper...
Moderate: gcc security and bug fix update
3.2.3-59 - fix directory traversal bug in fastjar Richard Guenther, 225552, CVE-2006-3619 - fix a reload bug with -fnon-call-exceptions Alexandre Oliva, 226706...
CentOS 3 : gcc (CESA-2007:0473)
Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...
cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update
CentOS Errata and Security Advisory CESA-2007:0473 Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C,...
cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update
CentOS Errata and Security Advisory CESA-2007:0220 Updated gcc packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C...
RHEL 4 : gcc (RHSA-2007:0220)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0220 advisory. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support libraries. Jrgen Weigert discovered a...
CVE-2006-3619
CVE-2006-3619 describes a directory-traversal flaw in FastJar’s extract_jar function (jartool.c). The vulnerability exists in FastJar 0.93 and earlier (as used in GCC 4.1.1 and earlier, and 3.4.6 and earlier) and allows a user-controlled .jar to overwrite arbitrary files via filenames containing ...
CVE-2005-3619
Cross-site scripting XSS vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when...
CVE-2005-3619
CVE-2005-3619 affects VMware ESX Server management interface. The issue is a cross-site scripting (XSS) vulnerability in the web-based syslog viewer, where messages displayed without proper sanitization can inject arbitrary script/HTML. Affected versions include ESX 2.5.x prior to 2.5.2 upgrade p...
Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue
-- Corsaire Security Advisory -- Title: VMware ESX Server Cross Site Scripting issue Date: 14.11.05 Application: VMware ESX prior to 2.5.2 upgrade patch 2 VMware ESX prior to 2.1.2 upgrade patch 6 VMware ESX prior to 2.0.1 upgrade patch 6 Environment: VMware ESX Author: Stephen de Vries...
CVE-2005-3618
Cross-site request forgery CSRF vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows remote attackers to perform unauthorized actions as the administrator via URLs, as demonstrated using...
CVE-2005-3990
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-3619. Reason: This candidate is a duplicate of CVE-2006-3619. Notes: All CVE users should reference CVE-2006-3619 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...