54 matches found
[SECURITY] [DSA 2364-1] xorg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2364-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2011 http://www.debian.org/security/faq -...
X.Org xorg 1.4 < 1.11.2 - File Permission Change
/ xchmod.c -- Xorg file permission change vulnerability PoC Author: vladz http://vladz.devzero.fr Date: 2011/12/15 Software: www.x.org Version: Xorg 1.4 to 1.11.2 in all configurations. Xorg 1.3 and earlier if built with the USECHMOD preprocessor identifier Tested on: Debian 6.0.2 up to date with...
X.Org xorg 1.4 1.11.2 - File Permission Change
X.Org xorg 1.4 1.11.2 - File Permission Change / xchmod.c -- Xorg file permission change vulnerability PoC Author: vladz http://vladz.devzero.fr Date: 2011/12/15 Software: www.x.org Version: Xorg 1.4 to 1.11.2 in all configurations. Xorg 1.3 and earlier if built with the USECHMOD preprocessor...
SuSE 11.1 Security Update : ConsoleKit (SAT Patch Number 4613)
Remote users logged in via e.g. ssh could open a consolekit session that is considered local and therefore gain additional privileges, e.g. via policykit. CVE-2010-4664 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2010-4613
Hycus CMS 1.0.3 is affected by a Local File Include vulnerability (CVE-2010-4613). The issue arises from insufficient sanitization of the site parameter in index.php and admin.php, allowing remote attackers to include local files via directory traversal sequences (e.g., ../../) and NULL-byte tric...
CVE-2009-4613
SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...
CVE-2009-4613
CVE-2009-4613 corresponds to a SQL injection vulnerability in NetArt Media Real Estate Portal 2.0, specifically in realestate20/loginaction.php where the Password parameter can be exploited by remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple sour...
CVE-2008-4613
CVE-2008-4613 concerns PortalApp 4.0 where the forums.asp script’s sortby parameter is vulnerable to SQL injection. The root cause is inadequate input sanitization, allowing an unauthenticated attacker to influence database queries via the sortby value. Impact per the sources is the ability to ex...
CVE-2007-4613
CVE-2007-4613 affects BEA WebLogic Server SSL libraries (versions 6.1 Gold–SP7, 7.0 Gold–SP7, 8.1 Gold–SP5). Vulnerability: an attacker in a MITM can obtain plaintext from an SSL stream by injecting crafted data and measuring timing of error responses. This is a separate issue from CVE-2006-2461....
CVE-2006-4613
Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving 1 IPSec replay windows and 2 the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018...
CVE-2006-4613
CVE-2006-4613 affects SnapGear before 3.1.4u1, with denial-of-service via IPSec replay window and via vulnerable ClamAV before 0.88.4; the latter (CVE-2006-4018) is a UPX-handling heap overflow in ClamAV that can crash the scanner or allow remote code execution. Some sources note vector 2 may be ...
CVE-2006-4613
Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving 1 IPSec replay windows and 2 the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018...
CVE-2005-4613
Technical details for CVE-2005-4613 are not publicly available in the provided documents; the materials include only a general description of an XSS issue in VUBB alpha rc1. Monitor for updates.