Buffer overflow

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

Stack overflow

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action...

CVE-2009-1176

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

Heap overflow

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header...

Design/Logic Flaw

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists...

CVE-2009-1177

Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors...

Debian: Security Advisory (DSA-1745-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 4 / 5 : firefox (RHSA-2009:0397)

Updated firefox packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

[SECURITY] Fedora 9 Update: google-gadgets-0.10.5-4.fc9

Google Gadgets for Linux provides a platform for running desktop gadgets under Linux, catering to the unique needs of Linux users. It can run, without modification, many Google Desktop gadgets as well as the Universal Gadgets on iGoogle...

RHEL 4 : NetworkManager (RHSA-2009:0362)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:0362 advisory. - NetworkManager: GetSecrets disclosure CVE-2009-0365 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Heap overflow

Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or 2 a long Accept-Language HTTP header,...

Ubuntu: Security Advisory (USN-612-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 3 / 4 / 5 : ghostscript (RHSA-2009:0345)

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...

GDL 4.x (node) Remote SQL Injection Vulnerability

No description provided by source. Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs...

[SECURITY] Fedora 10 Update: opensc-0.11.7-1.fc10

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

GDL 4.x SQL Injection

Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip Script site:...

GDL 4.x (node) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= GDL 4.x node Remote SQL Injection Vulnerability ================================================= Discovered by g4t3w4y transitory only...

GDL 4.x - node SQL Injection

GDL 4.x - node SQL Injection Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip...

RHEL 4 / 5 : libsoup (RHSA-2009:0344)

Updated libsoup and evolution28-libsoup packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libsoup is an HTTP client/library implementation for GNOME writte...

GDL 4.x - 'node' SQL Injection

Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip Script site:...