53 matches found
SLES9: Security update for yast2-backup
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-backup For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5037889 within th...
SuSE9 Security Update : yast2-backup (YOU Patch Number 12279)
This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE 10 Security Update : yast2-backup (ZYPP Patch Number 5760)
This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE Update for yast2-backup SUSE-SA:2008:054
Check for the Version of yast2-backup OpenVAS Vulnerability Test $Id: gbsuse2008054.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for yast2-backup SUSE-SA:2008:054 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
CVE-2008-4636
CVE-2008-4636 affects yast2-backup versions 2.14.2–2.16.6 on SUSE Linux and Novell Linux. The root cause is shell metacharacters in filenames used by the backup process, which can allow local users to gain privileges (C/C and I/C/A impacts). The cited resources describe a security update for SUSE...
SuSE 10 Security Update : yast2-backup (ZYPP Patch Number 5739)
This updated of yast2-backup fixes a shellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
Immunity Canvas: PHPBG_INCLUDE
Name| phpbginclude ---|--- CVE| CVE-2007-4636 Exploit Pack| CANVAS Description| phpBG Remote file inclusion Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: phpbg CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4636 CVE Name: CVE-2007-4636...
CVE-2007-4636
CVE-2007-4636 affects phpBG 0.9.1. Concrete details from connected docs show multiple PHP remote file inclusion vulnerabilities that allow an attacker to cause the application to execute arbitrary PHP code by supplying a URL in the rootdir parameter to files including intern/admin/other/backup.ph...
CVE-2006-4636
Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contai...
CVE-2006-4636
The CVE-2006-4636 entry concerns a directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier. An attacker can use the Directory parameter to include and execute arbitrary local files, demonstrated by values that target Apache log files containing PHP code. Affected product: SZEWO Ph...
CVE-2005-4636
OpenOffice.org 2.0 and earlier is affected. When hyperlinks are disabled, the Hyperlink dialog’s WWW-browser button can be clicked, potentially bypassing intended security settings and enabling user trickery. This CVE is documented across multiple sources (Red Hat, SUSE, Mandrake/Mandriva, Ubuntu...
