CVE-2009-4552

CVE-2009-4552 is an XSS vulnerability in the Miniweb 2.0 Survey Pro module. It allows remote attackers to inject arbitrary script/HTML via PATH_INFO to index.php. Affected: Miniweb 2.0 (Survey Pro). Root cause: unsanitized PATH_INFO input leading to reflected script execution. Impact: client-side...

SLES10: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VI...

SLES10: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES9: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040680 within the...

SLES9: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040680 within the...

SuSE9 Security Update : nfs-utils (YOU Patch Number 12274)

This update of nfs-utils fixes the handling of the tcp wrapper ACLs. CVE-2008-4552 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41250; scriptversion"1.8";...

SuSE 10 Security Update : nfs-utils (ZYPP Patch Number 5713)

This update of nfs-utils fixes the handling of the tcp wrapper ACLs. CVE-2008-4552 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41564; scriptversion"1.11";...

RedHat Security Advisory RHSA-2009:1321

The remote host is missing updates to nfs-utils announced in advisory RHSA-2009:1321. It was discovered that nfs-utils did not use tcpwrappers correctly. Certain hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny may not have been honored, possibly allowing remote attackers to...

CVE-2009-4552

creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9339...

Mandriva Linux Security Advisory : nfs-utils (MDVSA-2009:060)

A security vulnerability has been identified and fixed in nfs-utils, which caused TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions CVE-2008-4552. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Security Advisory MDVSA-2009:060-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory MDVSA-2009:060-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Gentoo Security Advisory GLSA 200903-06 (nfs-utils)

The remote host is missing updates announced in advisory GLSA 200903-06. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

rPSA-2008-0307-1 nfs-client nfs-server nfs-utils

rPath Security Advisory: 2008-0307-1 Published: 2008-10-30 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Minor Exposure Level Classification: Remote Vulnerability Updated Versions:...

nfs-utils软件包hosts_ctl()函数绕过安全限制漏洞

BUGTRAQ ID: 31823 CVECAN ID: CVE-2008-4552 nfs-utils软件包可提供内核NFS服务器和相关工具的守护程序。 nfs-utils软件包的TCP封装程序实现用错误的参数序列调用了hostsctl函数，远程攻击者可以绕过对NFS netgroup所实施的访问控制规则，获得对受限服务的访问。 sourceforge nfs-utils 1.0.9 sourceforge ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://freshmeat.net/projects/nfs-utils/...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

CVE-2008-4552

CVE-2008-4552 affects nfs-utils 1.0.9 and possibly earlier versions before 1.1.3. The good_client function calls hosts_ctl with arguments in the wrong order, causing TCP Wrappers to ignore netgroups and allow remote attackers to bypass access restrictions. This is a network-exposed issue (TCP wra...

CVE-2007-4552

CVE-2007-4552 affects Agares Media Arcadem 2.01. The vulnerability is an SQL injection in index.php exploitable via the blockpage parameter, enabling remote execution of arbitrary SQL. CVSS v2.0: 7.5 (HIGH), vector AV:N/AC:L/Au:N/C:P/I:P/A:P; network attack, no authentication, low complexity, par...

CVE-2006-4552

Cross-site scripting XSS vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary web script or HTML via the RSS feed...

CVE-2006-4552

The CVE-2006-4552 entry concerns CHXO Feedsplitter (RSS/RDF feed converter) with a cross-site scripting flaw. The Feedsplitter component (feedsplitter.php) processes the format parameter when parsing an XML feed, and improper validation allows a remote attacker to inject arbitrary script via a fe...