117 matches found
CVE-2014-4439
CVE-2014-4439 affects Apple Mail on OS X versions prior to 10.10. The issue arises when the removal of a recipient address from a message is not properly recognized, enabling potential information disclosure by reading a message intended for others. Affected: macOS OS X before 10.10. Remediation ...
Fedora 20 : salt-0.17.1-1.fc20 (2013-19438)
Update to bugfix release 0.17.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
CVE-2013-4439
Salt (SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key. Affected versions: up to 0.17.0. Impact: impersonation by an authenticated minion. Remediation: upgrade to 0.17.1 or later (e.g., Fedora adviso...
CVE-2013-4439
Removed by vendor...
CVE-2013-4439
Salt aka SaltStack before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key...
Fedora 18 : salt-0.17.1-1.fc18 (2013-19354)
Updated to bugfix release 0.17.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
CVE-2010-4439
Technical details about CVE-2010-4439 are not provided in the attached documents; no affected products, vectors, or fixes are specified. Monitor for updates from official advisories.
CVE-2009-4439
CVE-2009-4439 affects IBM DB2 9.5 before FP5. An unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query. Connected sources describe multiple unspecified vulnerabilit...
CVE-2008-4439
CVE-2008-4439 affects MartinWood Datafeed Studio prior to 1.6.3, where PHP remote file inclusion is possible in admin/bin/patch.php via the INSTALL_FOLDER URL parameter, enabling remote execution of PHP code. Exploitation details are described in vendor references; one cited path notes a Datafeed...
CVE-2008-4439
creationtimestamp| type| source ---|---|--- 2008-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32226...
Debian: Security Advisory (DSA-967-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-4439
CVE-2007-4439 describes a PHP remote file inclusion in popup_window.php for Squirrelcart 1.x.x and earlier. The issue arises when an attacker supplies a URL in the site_isp_root parameter (likely related to cart.php), allowing execution of arbitrary PHP code on affected systems. Affected software...
CVE-2006-4439
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...
CVE-2006-4439
CVE-2006-4439 refers to a Solaris 10 local-privilege issue in pkgadd where, prior to 2006-08-25, files could be installed with insecure permissions (755 or 777) if the pkgmap mode field contained a question mark. This could allow local users to modify arbitrary files or directories. The descripti...
Solaris 10 (sparc) : 119254-93 (deprecated)
SunOS 5.10: Install and Patch Utilities Patch. Date this patch was last updated by Sun : Mar/29/16 This plugin has been deprecated and either replaced with individual 119254 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...
CVE-2005-4439
CVE-2005-4439 affects the elog/elogd component in ELOG prior to corrected releases. The issue is a buffer overflow when processing URL parameters (notably long cmd or mode parameters), enabling remote attackers to crash the application and potentially execute arbitrary code. Connected advisories ...
