CVE-2008-4569

creationtimestamp| type| source ---|---|--- 2008-10-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6731...

Gentoo Security Advisory GLSA 200710-15 (KDM)

The remote host is missing updates announced in advisory GLSA 200710-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-19 (Firefox)

The remote host is missing updates announced in advisory GLSA 200609-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : flac (ZYPP Patch Number 4569)

Multiple integer overflows in flac could potentially be exploited by attackers via specially crafted files to execute code in the context of the user opening the file. CVE-2007-4619 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : KDE (ZYPP Patch Number 4433)

Users could log in as root without having to enter the password if auto login was enabled and if kdm was configured to require the root passwort to shutdown the system. CVE-2007-4569 JavaScript code could modify the URL in the address bar to make the currently displayed website appear to come fro...

Fedora 7 : kdebase-3.5.7-13.1.fc7 (2007-2361)

Tue Oct 2 2007 Than Ngo - 6:3.5.7-13.1 - rh299731, CVE-2007-4569 - Wed Aug 15 2007 Rex Dieter 6:3.5.7-13 - CVE-2007-3820, CVE-2007-4224, CVE-2007-4225 - License: GPLv2 - Requires: kdelibs3-devel - Fri Jul 20 2007 Rex Dieter - 6:3.5.7-12 - fix unpackaged files - Fri Jul 20 2007 Rex Dieter -...

Fedora Core 6 : kdebase-3.5.7-1.fc6 / kdelibs-3.5.7-1.fc6 (2007-716)

The remote Fedora Core host is missing one or more security updates : kdebase-3.5.7-1.fc6 : - Tue Oct 2 2007 Than Ngo - 6:3.5.7-1.fc6 - CVE-2007-4224, CVE-2007-4225, CVE-2007-3820 - rh299741, CVE-2007-4569 - Mon Jul 2 2007 Than Ngo - 6:3.5.7-0.fc6.2 - fix 244906 kdelibs-3.5.7-1.fc6 : - Tue Oct 2...

Debian DSA-1376-1 : kdebase - programming error

iKees Huijgen discovered that under certain circumstances KDM, an X session manager for KDE, could be tricked into allowing user logins without a password. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...

Slackware 12.0 : kdebase, kdelibs (SSA:2007-264-01)

New kdebase packages are available for Slackware 12.0 to fix security issues. A long URL padded with spaces could be used to display a false URL in Konqueror's addressbar, and KDM when used with no-password login could be tricked into logging a different user in without a password. This is not th...

[slackware-security] kdebase, kdelibs

New kdebase packages are available for Slackware 12.0 to fix security issues. A long URL padded with spaces could be used to display a false URL in Konqueror's addressbar, and KDM when used with no-password login could be tricked into logging a different user in without a password. This is not th...

CVE-2007-4569

CVE-2007-4569 affects KDE kdebase (KDM) where autologin combined with “shutdown with password” enables a local attacker to bypass password protection and login to arbitrary accounts. The primary sources tie this to KDE 3.3.0–3.5.7 and describe the login bypass via unspecified vectors; OpenVAS/Nes...

[SECURITY] [DSA 1376-1] New kdebase packages fix authentication bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1376 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

Fedora Core 5 : firefox-1.5.0.7-1.fc5 (2006-976)

Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. CVE-2006-4565, CVE-2006-4566 A number of flaws were found in...

CVE-2006-4569

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...

CVE-2006-4569

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...

CVE-2006-4569

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...

CVE-2006-4569

CVE-2006-4569 relates to Firefox’s popup blocker: the “blocked popups” display could be shown in the Location bar instead of the originating frame, potentially enabling remote user‑assisted XSS. The connected advisories confirm this vulnerability in Mozilla Firefox up to version 1.5.0.6 and indic...

RHEL 4 : firefox (RHSA-2006:0675)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0675 advisory. Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious we...

Inter-Asterisk eXchange Protocol Detection

The remote system is running a server that speaks the Inter-Asterisk eXchange Protocol. Description : The Inter-Asterisk eXchange protocol IAX2 is used by the Asterisk PBX Server and other IP Telephony clients/servers to enable voice communication between them. SPDX-FileCopyrightText: 2006 Ferdy...

CVE-2005-4569

CVE-2005-4569 : Concrete details exist in connected docs. FTGate Technology’s FTGate 4.4 (Build 4.4.000, Oct 26 2005) is affected by a stack-based buffer overflow in index.fts triggered by a long tzoffset value. The vulnerability allows remote attackers to execute arbitrary code on the affected s...