54 matches found
Ubuntu: Security Advisory (USN-1080-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1080-2)
Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1080-1)
Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...
Debian DSA-2153-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0435 Gleb Napatov reported an issue in the KVM subsystem...
CVE-2010-4526
CVE-2010-4526 describes a race condition in the Linux kernel between 2.6.11-rc2 and 2.6.33 in sctp_icmp_proto_unreachable (net/sctp/input.c). An ICMP Unreachable to a socket that is already locked by a user can free the socket and trigger list corruption via sctp_wait_for_connect, enabling remote...
CVE-2009-4526
The CVE-2009-4526 entry affects the Drupal module Print (aka Printer, e-mail and PDF versions), specifically the Send by e-mail sub-module. Affected versions are 5.x before 5.x-4.9 and 6.x before 6.x-1.9. The vulnerability arises from not properly enforcing privilege requirements, allowing remote...
CVE-2008-4526
CVE-2008-4526 affects CCMS 3.1. Multiple directory traversal vulnerabilities allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to index.php, forums.php, admin.php, header.php, pages/story.php, and pages/poll.php. This entry has a CVSS v2 ...
CVE-2008-4526
creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6663...
CVE-2007-4526
CVE-2007-4526 concerns the Client Login Extension (CLE) in Novell Identity Manager prior to version 3.5.1 20070730 . The vulnerability arises because CLE stores usernames and passwords in a local file, enabling local users to read sensitive credentials from the filesystem. The provided sources co...
CVE-2006-4526
CVE-2006-4526 affects CubeCart 3.0.12 and earlier. The SQL injection flaw occurs in includes/content/viewCat.inc.php when register_globals is enabled, allowing remote attackers to execute arbitrary SQL commands via the searchArray[] parameter. The vulnerability is documented across multiple sourc...
CVE-2005-4526
CVE-2005-4526 affects Clearswift MIMEsweeper For Web (WEBsweeper) versions 4.0–5.1. The vulnerability allows remote attackers to bypass content filtering by using a URL that does not contain a ".exe" extension but returns an executable file. The connected PT-Security entry notes the affected vers...
CVE-2018-4526
CVE-2018-4526 entry is rejected/not used and does not represent an active vulnerability entry.
