[SECURITY] Fedora 8 Update: kdelibs4-4.0.3-7.fc8

Libraries for the K Desktop Environment 4...

[SECURITY] Fedora 7 Update: kdebase4-4.0.3-9.fc7

Core runtime requirements and applications for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts...

[SECURITY] Fedora 7 Update: kdebase-runtime-4.0.3-10.fc7.1

Core runtime for the K Desktop Environment 4. This package does not include the KDE 4 versions of applications which are provided by KDE 3 because of file and configuration setting conflicts...

CVE-2008-1670

Heap-based buffer overflow in the progressive PNG Image loader decoders/pngloader.cpp in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image...

CVE-2008-0830

The Digital Photo Access Protocol DPAP server for iPhoto 4.0.3 allows remote attackers to cause a denial of service crash via a malformed dpap: URI, a different vulnerability than CVE-2008-0043...

Apple iOS 4.0.3 - DPAP Server Denial of Service

!/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 \n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else $port = 8770; $socket=new...

Debian Security Advisory DSA 225-1 (tomcat4)

The remote host is missing an update to tomcat4 announced via advisory DSA 225-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1150-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1150-1. A bug has been discovered in several packages that execute the setuid system call without checking for success when trying to drop privileges, which may fail with some PAM configurations. OpenVAS Vulnerability Test...

WinSCP 4.0.3 - URL Protocol Handler Arbitrary File Access

WinSCP 4.0.3 - URL Protocol Handler Arbitrary File Access source: https://www.securityfocus.com/bid/25655/info WinSCP is prone to a vulnerability that lets an attacker upload arbitrary files to a victim's computer or to download arbitrary files from the victim's computer in the context of the...

WinSCP 4.0.3 - URL Protocol Handler Arbitrary File Access

source: https://www.securityfocus.com/bid/25655/info WinSCP is prone to a vulnerability that lets an attacker upload arbitrary files to a victim's computer or to download arbitrary files from the victim's computer in the context of the vulnerable application. This issue affects versions prior to...

CVE-2007-3048

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-3048

Summary: CVE-2007-3048 affects GNU Screen 4.0.3, where local users may unlock the screen by issuing a CTRL-C at the password prompt. The issue has been reported with inconsistent reproducibility across reports. Impact: Local privilege-related concern affecting screen sessions; exploitation appear...

Re: [Full-disclosure] screen 4.0.3 local Authentication Bypass

-----Original Message----- Subject: Re: Full-disclosure screen 4.0.3 local Authentication Bypass Verified on OpenBSD I'm not seeing a 'Getpass error' message on 4.1-STABLE current, but there does seem to be a problem with locking and reattaching: $ screen space $ echo "This is the locked screen"...

[Full-disclosure] screen 4.0.3 local Authentication Bypass

/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date: Known since somewhere in &cantremember Affected Software: screen = 4.0.3 Type: Local Typ...

screen 4.0.3 Local Authentication Bypass Vulnerability

No description provided by source. / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date: Known since somewhere in &cantremember...

Typo3 3.7/3.8/4.0 - 'Class.TX_RTEHTMLArea_PI1.php' Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/21680/info TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data. Exploiting these issues allows unauthenticated attackers to...

Sun SunView rpc.selection_svc远程文件泄露漏洞

selectionsvc是SunOS系统下一个RPC服务。 早期SunOS系统下的的selectionsvc RPC服务程序实现上存在漏洞，允许攻击者源程读取目标系统上的任意文件。 在Sun3和Sun4系统中，远程用户可以读取任何SunView运行用户可读的文件。而在i386平台下，远程用户可以读取运行SunView的工作站上的任意文件。注意，如果root运行了SunView，那么所有的文件就都可能被远程系统所访问。...

CVE-2006-4573

Multiple unspecified vulnerabilities in the "utf8 combining characters handling" utf8handlecomb function in encoding.c in screen before 4.0.3 allows user-assisted attackers to cause a denial of service crash or hang via certain UTF8 sequences...

phpCommunityCalendar 4.0.3 - Cross-Site Scripting SQL Injection

phpCommunityCalendar 4.0.3 - Cross-Site Scripting SQL Injection author : X0r1 release : 23.05.06 software : http://www.appideas.com/ googledork : "Calendar programming by AppIdeas.com" filetype:php XSS: http://SERVER/PATH/week.php?LoName=alert'XSS' http://SERVER/PATH/month.php?LoName=alert'XSS'...

phpCommunityCalendar <= 4.0.3 Multiple (XSS/SQL) Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCommunityCalendar author : X0r1 release : 23.05.06 software : http://www.appideas.com/ googledork : "Calendar programming by AppIdeas.com" filetype:php XSS:...