93 matches found
Ubuntu 9.10 / 10.04 LTS / 10.10 : python-django vulnerabilities (USN-1040-1)
Adam Baldwin discovered that Django did not properly validate query string lookups. This could be exploited to provide an information leak to an attacker with admin privilieges. CVE-2010-4534 Paul McMillan discovered that Django did not validate the length of the token used when generating a...
CVE-2009-4534
Open redirect vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2009-4534
The CVE-2009-4534 entry describes an Open Redirect in the Drupal FAQ Ask module 5.x/6.x up to 6.x-2.0, allowing remote attackers to redirect users to arbitrary sites and facilitate phishing via unspecified vectors. Affected component: Drupal FAQ Ask module; vulnerable part: redirect handling. Roo...
CVE-2008-4534
EC-CUBE contains a SQL injection vulnerability in Version 2.x (2.1.2a and earlier, and 2.x RC 2.3.0-rc1 and earlier). The root cause is unsafeguarded SQL construction via unspecified vectors, allowing remote attackers to execute arbitrary SQL commands. Impact described includes potential elevatio...
Debian Security Advisory DSA 1208-1 (bugzilla)
The remote host is missing an update to bugzilla announced via advisory DSA 1208-1. Several remote vulnerabilities have been discovered in the Bugzilla bug tracking system, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...
Debian: Security Advisory (DSA-1208-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)
Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...
CVE-2007-4534
CVE-2007-4534 affects Vavoom 1.24 and earlier, where a buffer overflow in VThinker::BroadcastPrintf (p_thinker.cpp) allows remote code execution via overly long strings in chat messages or a long name field. The vulnerability is documented in the NVD entry for CVE-2007-4534 (base score 7.5, HIGH,...
[SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1208-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 11th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4534
Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...
CVE-2006-4534
Microsoft Word’s Malformed Stack vulnerability (CVE-2006-4534) affects Word 2000, Word 2002, and Word 2003 (Office suite) and is exploitable via specially crafted Word files delivered as email attachments or hosted on the web. The underlying issue is memory corruption leading to remote code execu...
CVE-2005-4534
CVE-2005-4534 affects Bugzilla versions 2.9–2.16.10 via the shadow database (syncshadowdb). A local user can exploit insecure temporary file handling to perform a symlink attack and overwrite files Bugzilla can access, potentially leading to denial of service. The advisory notes that newer versio...