120 matches found
CVE-2009-4070
SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2009-4070
CVE-2009-4070 describes a SQL injection in GForge versions such as 4.5.14 and 4.7.3 (and possibly others). Remote attackers could execute arbitrary SQL commands via unknown vectors. The connected Red Hat, Debian, and Ubuntu entries corroborate the vulnerability in GForge and note the need for upd...
CVE-2009-4070
SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors...
Debian DSA-1818-1 : gforge - insufficient input sanitising
Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...
Mandriva Update for mozilla-thunderbird MDVSA-2008:206 (mozilla-thunderbird)
Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2008:206 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Mandriva Update for mozilla-thunderbird MDVSA-2008:206 (mozilla-thunderbird)
Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2008:206 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Ubuntu: Security Advisory (USN-647-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for thunderbird RHSA-2008:0908-01
Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2008:0908-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for thunderbird FEDORA-2008-9859
Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2008-9859 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Fedora Update for thunderbird FEDORA-2008-9807
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5655)
This update brings Mozilla Thunderbird to version 2.0.0.17. It contains the following security fixes: MFSA 2008-46 / CVE-2008-4070: Heap overflow when canceling a newsgroup message MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters...
Mozilla Foundation Security Advisory 2008-46
Mozilla Foundation Security Advisory 2008-46 Title: Heap overflow when canceling newsgroup message Impact: Critical Announced: September 25, 2008 Reporter: Georgi Guninski Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 2.0.0.17 SeaMonkey 1.1.12 Description Georgi Guninski reported a buffe...
Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : mozilla-thunderbird (SSA:2008-270-01)
New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-270-01. The te...
CVE-2008-4070
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long header in a news article, related to "canceling a newsgroup message" and "cancelled...
CVE-2008-4070
The provided documents confirm CVE-2008-4070 is a heap-based buffer overflow in Thunderbird (before 2.0.0.17) and SeaMonkey (before 1.1.12) triggered by a long header in a news article when canceling a newsgroup message. Impact stated: remote code execution risk or application crash (denial of se...
CVE-2007-4070
CVE-2007-4070 concerns an unspecified vulnerability in the Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8–10 prior to 20070725. It allows local users to read arbitrary files with root group ownership via unknown vectors. The provided connected documents do not include concrete details on affec...
CVE-2006-4070
CVE-2006-4070 concerns a format-string vulnerability in Imendio Planner 0.13. The flaw allows user-assisted attackers to execute arbitrary code via format specifiers embedded in a filename. According to NVD, the base CVSSv2 score is 5.1 (Medium) with network access required and no authentication....
CVE-2006-4070
Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename...
