112 matches found
CVE-2008-4190
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2 ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream...
CVE-2008-4190
CVE-2008-4190 stems from Openswan’s IPsec livetest tool. The vulnerability is a local privilege escalation via a symlink attack on temporary files (ipseclive.conn and ipsec.olts.remote.log), allowing local users to overwrite arbitrary files and execute code. Affected products/versions: Openswan 2...
Debian: Security Advisory (DSA-1033-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Directory traversal
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the detail...
openSUSE 10 Security Update : horde (horde-1600)
This update of horde fixes some cross-site-scripting vulnerabilities. CVE-2005-4190,CVE-2006-2195 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update horde-1600. The text description of this plugi...
CVE-2007-4190
CVE-2007-4190 (Joomla!) : A CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and potentially perform HTTP response splitting, which can enable cross-site scripting in some cases. The flaw arises from CRLF sequences in the...
Debian DSA-1033-1 : horde3 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4190 Several Cross-Site-Scripting vulnerabiliti...
CVE-2006-4190
CVE-2006-4190 is a directory traversal vulnerability in the AutoHTML module for PHP-Nuke, exploitable via a .. in the name parameter of a modload operation within autohtml.php. The affected component is the AutoHTML module’s autohtml.php; root cause is improper handling of the filename parameter ...
[SECURITY] [DSA 1033-1] New horde3 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1033-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 12th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4190
The CVE-2005-4190 issue affects Horde Application Framework prior to 3.0.8, introducing multiple cross-site scripting (XSS) vulnerabilities. Exploitation is possible via several input vectors (identity, Category/Label search, Mobile Phone, Date/Time fields) when importing CSV files and through mo...
