F-Secure Multiple Products Unspecified Code Execution

Binary data 4432.prm...

CVE-2007-4432

CVE-2007-4432 affects the wrapper scripts for rug, zen-updater, zen-installer, and zen-remover on SUSE Linux 10.1 and SUSE Linux Enterprise 10. The issue is an untrusted search path vulnerability caused by environment variables LD_LIBRARY_PATH and MONO_GAC_PREFIX, allowing local privilege escalat...

CVE-2006-4432

Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot sequence in the final component of the PHP session identifier PHPSESSID. NOTE: in some cases, this issue can be leveraged to perform direct static code...

CVE-2006-4432

The CVE-2006-4432 entry describes a directory traversal in Zend Platform 2.2.1 and earlier. An attacker can overwrite arbitrary files by supplying a .. in the final PHPSESSID component, enabling potential direct static code injection in some cases. The affected product is Zend Platform (versions ...

CVE-2005-4432

CVE-2005-4432 reflects an XSS vulnerability in PlaySMS 0.8, where index.php is vulnerable to script/HTML injection via the err parameter. Affected component: index.php (PlaySMS 0.8). Underlying cause: improper handling of the err parameter enables arbitrary script execution in the victim’s browse...