Mandrake Security Advisory MDVSA-2009:225 (qt4)

The remote host is missing an update to qt4 announced via advisory MDVSA-2009:225. OpenVAS Vulnerability Test $Id: mdksa2009225.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:225 qt4 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

OXID eShop Community Edition Unauthorized Write Access Vulnerability

This host is installed with OXID eShop Community Edition and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthwritevuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Write Access Vulnerability Authors: Nikita M...

CVE-2009-2700

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

CVE-2009-2700

Technical details for CVE-2009-2700 are not publicly available in the provided connected documents. The initial description notes a SAN '\�' issue in Qt 4.x, but no accompanying connected item supplies vendor, product, affected versions, impact, or remediation steps beyond that. Monitor for offic...

Linux Kernel 2.4/2.6 sock_sendpage() ring0 Root Exploit (simple ver)

No description provided by source. / 0x82-CVE-2009-2692 Linux kernel 2.4/2.6 32bit socksendpage local ring0 root exploit simple ver Tested RedHat Linux 9.0, Fedora core 411, Whitebox 4, CentOS 4.x. -- Discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team. spender and venglin's...

Apple Safari 4.x - JavaScript Reload Remote Crash

Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.2009 Tested on: - Safari 4.0 at Windows XP SP3 - Safa...

Apple Safari 4.x - JavaScript Reload Remote Crash

Apple Safari 4.x - JavaScript Reload Remote Crash Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.200...

Apple Safari 4.x JavaScript Reload Remote Crash Exploit

Exploit for multiple platform in category dos / poc ======================================================= Apple Safari 4.x JavaScript Reload Remote Crash Exploit ======================================================= Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut...

Sql injection

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6642

SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL commands via the sid parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1176

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

CVE-2009-0839

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action...

Buffer overflow

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

CVE-2009-1176

mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action...

Stack overflow

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action...

Design/Logic Flaw

The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists...

Heap overflow

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header...

CVE-2009-1177

Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors...

GDL 4.x (node) Remote SQL Injection Vulnerability

No description provided by source. Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs...

GDL 4.x SQL Injection

Discovered by g4t3w4y \ jkthackerlinkatgmail.com transitory only http://jakartaweb.net/home/GDL-Digital-Library-SQL-Injection-Vulnerability.html : GDL v.4.x SQL Injection Vulnerability Script: GDL 4.0 | htdocs .gz GDL 4.0 | windows application GDL 4.2 | htdocs .zip Script site:...