RHEL 6 : 389-ds-base (RHSA-2013:1752)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1752 advisory. The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

RedHat Update for 389-ds-base RHSA-2013:1752-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Blue Coat ICAP Patience Page XSS

The remote host is running a version of Blue Coat ProxySG that suffers from a XSS issue. An attacker can exploit this issue by sending a malicious link that will redirect the user to the ICAP 'Patience' page which will echo the link back, unfiltered. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2012-4485

The CVE concerns the Drupal Gallery formatter module prior to 7.x-1.2, specifically the galleryformatter_field_formatter_view function in galleryformatter.tpl.php. The vulnerability arises from multiple XSS flaws that allow remote authenticated users with node/entity creation permissions to injec...

Fedora Update for libzip FEDORA-2012-4485

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-4485

CVE-2010-4485 affects Google Chrome before 8.0.552.215. The vulnerability stems from improper restriction in the generation of file dialogs, allowing a remote crafted site to cause a denial of service (reduced usability or possible crash). The provided documents (NVD and OpenVAS entries) confirm ...

Word Viewer OCX 3.2 Remote File Execution exploit

Exploit for unknown platform in category remote exploits ================================================= Word Viewer OCX 3.2 Remote File Execution exploit ================================================= ---------------------------------------------------------- Word viewer OCX V 3.2 Remote Fi...

CVE-2008-4485

Cross-site scripting XSS vulnerability in the ICAP patience page in Blue Coat Security Gateway OS SGOS 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-4485

CVE-2008-4485: XSS in the ICAP Patience page of Blue Coat SGOS. Affects SGOS 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7; remote attackers can inject arbitrary script via the URL. Connected sources confirm the issue; no patch/mitigation details are provided in the documents.

eTrust SCM SMTP Version Detection

Binary data 4485.prm...

SuSE 10 Security Update : X.org X11 (ZYPP Patch Number 4485)

This update fixes the following issues : X Font Server buildrange Integer Overflow Vulnerability IDEF2708 CVE-2007-4989, X Font Server swapchar2b Heap Overflow Vulnerability IDEF2709 CVE-2007-4990, Composite extension buffer overflow. CVE-2007-4730 %NASLMINLEVEL 70300 C Tenable Network Security,...

Ubuntu 5.04 / 5.10 / 6.06 LTS : php4, php5 vulnerabilities (USN-362-1)

The stripos function did not check for invalidly long or empty haystack strings. In an application that uses this function on arbitrary untrusted data this could be exploited to crash the PHP interpreter. CVE-2006-4485 An integer overflow was discovered in the PHP memory allocation handling. On...

CVE-2007-4485

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter. NOTE: it...

CVE-2007-4485

CVE-2007-4485 affects Butterfly online visitors counter 1.08. The vulnerability arises in visitor.php where, when used with certain older PHP versions and improper handling of the SERVER superglobal, an attacker can cause a remote PHP code execution by supplying a URL in _SERVER[DOCUMENT_ROOT]. T...

Mandrake Linux Security Advisory : php (MDKSA-2006:162)

The 1 fileexists and 2 imapreopen functions in PHP before 5.1.5 do not check for the safemode and openbasedir settings, which allows local users to bypass the settings CVE-2006-4481. Buffer overflow in the LWZReadByte function in ext/gd/libgd/gdgifin.c in the GD extension in PHP before 5.1.5 allo...

Microsoft IIS ASP chunked encoding buffer overflow

Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...

Important: Red Hat Security Advisory: php security update

Updated PHP packages that fix multiple security issues are now available for the Red Hat Application Stack. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web serve...

[Full-disclosure] [ MDKSA-2006:162 ] - Updated php packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:162 http://www.mandriva.com/security/ Package : php Date : September 7, 2006 Affected: 2006.0, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The 1 fileexists and 2 imapreopen functions in PH...

CVE-2006-4485

The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read...

CVE-2006-4485

The CVE-2006-4485 issue is a concrete vulnerability in PHP 5.x up to versions before 5.1.5, where the stripos function may trigger an out-of-bounds read. Public references in OpenVAS/Ubuntu advisories confirm PHP 5.1.x