Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : ruby1.8 vulnerabilities (USN-1603-1)

Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. CVE-2012-4466, CVE-2012-4481. Note that Tenable Network Security has extracted the preceding...

USN-1603-1: Ruby vulnerabilities

Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. CVE-2012-4466, CVE-2012-4481...

PHP 5.1.x < 5.1.5 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4481)

IBM Java 1.4.2 was updated to SR13 FP9, fixing bugs and security issues. More information can be found on the IBM JDK Alerts page : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora Update for phpMyAdmin FEDORA-2011-3737

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2139-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 2139-1. OpenVAS Vulnerability Test $Id: deb21391.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2139-1 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2139-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 31, 2010 http://www.debian.org/security/faq -...

CVE-2010-4481

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2010-4481

CVE-2010-4481 concerns phpMyAdmin prior to 3.4.0-beta1, where remote attackers could bypass authentication and disclose sensitive info by directly requesting phpinfo.php (which invokes phpinfo). The connected Github/OSV/Fedora records confirm the same vulnerability description and CVE linkage (CV...

Possible information disclosure.

PMASA-2010-10 Announcement-ID: PMASA-2010-10 Date: 2010-12-07 Updated: 2010-02-16 Summary Possible information disclosure. Description Unauthenticated user was able to display phpinfo output if phpMyAdmin was enabled to show it. Severity The issue is considered minor, because this feature is not...

CVE-2009-4481

...

CVE-2009-4481

CVE-2009-3111 (FreeRADIUS) is a remote denial-of-service vulnerability in the radiusd daemon caused by a flaw in rad_decode handling of Tunnel-Password attributes with zero length. The issue can crash radiusd via specially crafted RADIUS packets. Remediation observed in connected advisories inclu...

CVE-2008-4481

CVE-2008-4481 describes a cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling an attacker to execute code in a user’s browser. Multiple connected sources (NVD, JVN/JVNDB, ...

Trojan Horse Client Detection

Binary data 4481.prm...

CVE-2007-4481

CVE-2007-4481 is a documented cross-site scripting (XSS) vulnerability affecting the Blix WordPress themes (version 0.9.1 and Blix 0.9.1 Rus). The issue arises in index.php where PATH_INFO (PHP_SELF) input can be manipulated to inject arbitrary web script or HTML. The vulnerability status is base...

SUSE-SA:2006:052: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:052 php4,php5. Various security problems have been fixed in the PHP script language engine and its modules, versions 4 and 5. The PHP4 updated packages were released on September 12, the PHP5 update packages were released on...

Mandrake Linux Security Advisory : php (MDKSA-2006:162)

The 1 fileexists and 2 imapreopen functions in PHP before 5.1.5 do not check for the safemode and openbasedir settings, which allows local users to bypass the settings CVE-2006-4481. Buffer overflow in the LWZReadByte function in ext/gd/libgd/gdgifin.c in the GD extension in PHP before 5.1.5 allo...

[Full-disclosure] [ MDKSA-2006:162 ] - Updated php packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:162 http://www.mandriva.com/security/ Package : php Date : September 7, 2006 Affected: 2006.0, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The 1 fileexists and 2 imapreopen functions in PH...

CVE-2006-4481

The 1 fileexists and 2 imapreopen functions in PHP before 5.1.5 do not check for the safemode and openbasedir settings, which allows local users to bypass the settings. NOTE: the errorlog function is covered by CVE-2006-3011, and the imapopen function is covered by CVE-2006-1017...

CVE-2006-4481

CVE-2006-4481 affects PHP prior to 5.1.5. The vulnerability lies in the file_exists and imap_reopen functions not enforcing safe_mode or open_basedir, enabling local bypass of these restrictions. Exploitation details are not provided in the supplied documents. Affected component: PHP core (file_e...