77 matches found
Fedora Core 11 FEDORA-2009-12348 (php-pear-Mail)
The remote host is missing an update to php-pear-Mail announced via advisory FEDORA-2009-12348. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
Fedora Core 12 FEDORA-2009-12395 (php-pear-Mail)
The remote host is missing an update to php-pear-Mail announced via advisory FEDORA-2009-12395. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
Fedora 11 : php-pear-Mail-1.1.14-5.fc11 (2009-12348)
Fix CVE-2009-4023, CVE-2009-4111 PEAR's Mail class did not properly escape content of mail header fields, when using the sendmail backend. A remote attacker could send an email message, with specially crafted headers to local user, leading to disclosure of content and potentially, to modification...
Fedora 12 : php-pear-Mail-1.1.14-5.fc12 (2009-12395)
Fix CVE-2009-4023, CVE-2009-4111 PEAR's Mail class did not properly escape content of mail header fields, when using the sendmail backend. A remote attacker could send an email message, with specially crafted headers to local user, leading to disclosure of content and potentially, to modification...
Fedora 10 : php-pear-Mail-1.1.14-5.fc10 (2009-12439)
Fix CVE-2009-4023, CVE-2009-4111 PEAR's Mail class did not properly escape content of mail header fields, when using the sendmail backend. A remote attacker could send an email message, with specially crafted headers to local user, leading to disclosure of content and potentially, to modification...
CVE-2009-4023
Argument injection vulnerability in the sendmail implementation of the Mail::Send method Mail/sendmail.php in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111...
CVE-2009-4023
Summary: CVE-2009-4023 (with CVE-2009-4111) affects the Mail::Send implementation in PEAR Mail’s sendmail.php for the Mail package, version 1.1.14. A crafted $from parameter allows remote attackers to read and write arbitrary files over the network. The vulnerability is classified with base CVSS ...
Microsoft Windows活动目录LDAP请求缓冲区溢出漏洞（MS08-060）
BUGTRAQ ID: 31609 CVECAN ID: CVE-2008-4023 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows 2000 Server上的活动目录实现在接收特制LDAP或LDAPS请求时没有正确地分配内存，如果远程攻击者向服务器发送了特制的LDAP或LDAPS请求的话就可以触发缓冲区溢出，导致执行任意代码。 Microsoft Windows 2000 Server SP4 临时解决方法： 在外围防火墙处阻止TCP 389和636端口。 厂商补丁： Microsoft ---------...
MS08-060: Microsoft Windows Active Directory LDAP(S) Request Handling Remote Overflow (957280)
The remote version of Active Directory contains a vulnerability when processing LDAP requests. An attacker can exploit this flaw to execute arbitrary code on the remote Active Directory server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34405; scriptversion"1.28"...
CVE-2008-4023
The CVE-2008-4023 entry maps to Microsoft Windows 2000 Server SP4 Active Directory. The vulnerability is a memory allocation flaw in the LDAP/LDAPS request handling that can cause a remote code execution when a specially crafted LDAP packet is processed. Impact is remote code execution with full ...
CVE-2007-4023
Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-4023
Aruba Mobility Controller is affected by a cross-site scripting (XSS) vulnerability in the login CGI page. The issue impacts Aruba Mobility Controller versions 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions. The vulnerability allows remote attackers to inject arbitrary web scrip...
CVE-2006-4023
CVE-2006-4023 : The issue concerns the ip2long function in PHP 5.1.4 and earlier, which may incorrectly validate an arbitrary string and return a valid network IP address. This can enable remote attackers to obtain network information and facilitate other attacks, as demonstrated via SQL injectio...
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...
CVE-2005-4023
The Gallery 2.0 ZipCart module contains an unspecified vulnerability in versions before 2.0.2 that allows an unauthenticated, remote attacker to read arbitrary files, subject to web server user privileges. Exploitation requires the ZipCart module to be installed and active; the vectors are not di...
