74 matches found
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1080-2)
Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...
Ubuntu 10.10 : linux vulnerabilities (USN-1081-1)
It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1080-1)
Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...
CVE-2010-4649
The CVE-2010-4649 issue affects the Linux kernel up to 2.6.37, where an Integer overflow in ib_uverbs_poll_cq (drivers/infiniband/core/uverbs_cmd.c) allows a local user to cause memory corruption and a possible DoS or other unspecified impact when a structure member is large. The vulnerability re...
CVE-2009-4649
GeccBBlite 0.1 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the postatoda parameter to rispondi.php and scrivi.php, with improper handling in forum.php. The NVD/NVD-derived entry lists a CVSS v2 ba...
CVE-2008-4649
CVE-2008-4649 describes a session fixation vulnerability in Elxis CMS 2008.1 revision 2204, where remote attackers can hijack user sessions by supplying a crafted PHPSESSID parameter. The issue specifically affects Elxis CMS and enables session hijacking, as reflected in the description. The CVSS...
CVE-2007-4649
CVE-2007-4649 impacts MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1. The underlying issue is weak permissions (Everyone: Full Control) on installation directory trees, enabling local users to replace application files (e.g., traysser.exe) and pote...
CVE-2006-4649
The CVE-2006-4649 entry affects BinGo News (BP News) software, specifically version 3.01 and earlier. The vulnerability is a PHP remote file inclusion in bp_news.php via the bnrep parameter, allowing an attacker to cause the execution of arbitrary PHP code on the affected system. Connected record...
CVE-2005-4649
CVE-2005-4649 affects Advanced Guestbook 2.2 and 2.3.1, with XSS via (1) entry parameter in index.php and (2) gb_id in comment.php. Root cause: insufficient input sanitization on these parameters, allowing remote attackers to inject arbitrary HTML/JS. Index.php/entry vector may be related to CVE-...
CVE-2005-4649
Multiple cross-site scripting XSS vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the entry parameter in index.php and 2 the gbid parameter in comment.php. NOTE: The index.php/entry vector might be resultant from CVE-2005-154...
MS:638596DC-1D29-4649-80E0-FAE6916739E4
...
MS:213DE41B-2480-4649-9FEE-C7F1995A7491
...
