82 matches found
CVE-2010-3692
CVE-2010-3692 refers to a directory traversal vulnerability in the callback function of phpCAS before 1.1.3. When proxy mode is enabled, an attacker can abuse the Proxy Granting Ticket IOU parameter (PGTiou) to create or overwrite arbitrary files on the remote server. The issue is tied to the php...
Gentoo Security Advisory GLSA 201001-04 (virtualbox-bin virtualbox-ose virtualbox-guest-additions virtualbox-ose-additions)
The remote host is missing updates announced in advisory GLSA 201001-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Sun VirtualBox < 3.0.8 'VBoxNetAdpCtl' Privilege Escalation Vulnerability
Sun VirtualBox is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sun:virtualbox";...
CVE-2009-3692
creationtimestamp| type| source ---|---|--- 2009-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9973...
Sun VirtualBox <= 3.0.6 privilege escalation
No description provided by source. !/bin/sh CVE-2009-3692 Sun VirtualBox = 3.0.6 local root exploit ======================================================== Exploits popen meta char shell injection vulnerability in Sun VirtualBox. E.g. admin@sundevil:/test$ id uid=101admin gid=10staff...
CVE-2009-3692
CVE-2009-3692 affects Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and macOS, with a vulnerability in the VBoxNetAdpCtl configuration tool that enables local privilege escalation. Gentoo GLSA notes a shell metacharacter injection in popen() (and a possible buffer overflow in strncpy()...
FreeBSD : virtualbox -- privilege escalation (ebeed063-b328-11de-b6a5-0030843d3802)
Sun reports : A security vulnerability in the VBoxNetAdpCtl configuration tool for certain Sun VirtualBox 3.0 packages may allow local unprivileged users who are authorized to run VirtualBox to execute arbitrary commands with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
Fedora Core 9 FEDORA-2009-3692 (phpMyAdmin)
The remote host is missing an update to phpMyAdmin announced via advisory FEDORA-2009-3692. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Fedora 9 : phpMyAdmin-3.1.3.2-1.fc9 (2009-3692)
Improvements for 3.1.3.2: - security Insufficient output sanitizing when generating configuration file http://www.phpmyadmin.net/homepage/security/PMASA-2009-4.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
CVE-2008-3692
CVE-2008-3692 is described as an unspecified vulnerability in a VMware ActiveX control affecting multiple VMware products: Workstation 5.5.x up to 5.5.8 (build 108000), Workstation 6.0.x up to 6.0.5 (build 109488), VMware Player 1.x up to 1.0.8 (108000), VMware Player 2.x up to 2.0.5 (109488), VM...
VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0014 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information...
VMware存在多个安全漏洞
BUGTRAQ ID:30934 CVE ID：CVE-2008-3691 CVE-2008-3692 CVE-2008-3693 CVE-2008-3694 CVE-2008-3695 CVE-2008-3696 CNCVE ID：CNCVE-20083691 CNCVE-20083692 CNCVE-20083693 CNCVE-20083694 CNCVE-20083695 CNCVE-20083696 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 多个VMWare...
VMSA-2008-0014:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.
VMSA-2008-0014.3 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0014.3 VMware Security...
CVE-2007-3692
The CVE-2007-3692 issue concerns EZFactory KDDI Download CGI 1.x, where the download.cgi component is vulnerable to a directory traversal via the name parameter containing .., enabling remote attackers to read/download arbitrary server files. The JVN entry for KDDI’s EZFactory sample CGI download...
CheckPoint Firewall Default Web Server
Binary data 3692.prm...
CVE-2006-3692
PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lmpath parameter. NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lmpath variable is set to a constant...
CVE-2006-3692
The CVE-2006-3692 entry concerns ListMessenger 0.9.3. Affected component: enduser/listmessenger.php. Issue: PHP remote file inclusion via the lm_path parameter that can allow remote code execution. Root cause described in sources: the vulnerability arises from a parameter (lm_path) used in a way ...
CVE-2006-3692
PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lmpath parameter. NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lmpath variable is set to a constant...
KLA10399 Multiple vulnerabilities in Winmail
Multiple serious vulnerabilities have been found in Winmail Server. Malicious users can exploit these vulnerabilities to inject scripts or overwrite local files. Below is a complete list of vulnerabilities 1. A directory traversal can be exploited remotely via a side parameter; 2. An XSS...