CVE-2014-4668

The cherokeevalidatorldapcheck function in validatorldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty password...

CVE-2014-4668

CVE-2014-4668 affects Cherokee 1.2.103 and earlier when using LDAP: the cherokee_validator_ldap_check function does not properly handle unauthenticated-bind semantics, allowing authentication bypass via an empty password. Connected advisories confirm that updates were released across multiple dis...

openSUSE Security Update : file-roller (openSUSE-SU-2013:1281-1)

The GNOME file-roller archive tool was updated to fix a path traversal issue while unpacking CVE-2013-4668. File Roller now sanitizes path names while unpacking, so that a path traversal attack cannot be used to create files outside the unpack destination directory. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for file-roller FEDORA-2013-12667

Check for the Version of file-roller OpenVAS Vulnerability Test Fedora Update for file-roller FEDORA-2013-12667 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for file-roller FEDORA-2013-12667

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for file-roller USN-1906-1

Check for the Version of file-roller OpenVAS Vulnerability Test $Id: gbubuntuUSN19061.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for file-roller USN-1906-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Fedora Update for file-roller FEDORA-2013-12653

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2013-0232 Updated file-roller package fixes CVE-2013-4668

Updated file-roller package fixes security vulnerability: Directory traversal vulnerability in File Roller 3.6.x before 3.6.4 when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, relat...

Updated file-roller package fixes CVE-2013-4668

Updated file-roller package fixes security vulnerability: Directory traversal vulnerability in File Roller 3.6.x before 3.6.4 when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, relat...

Fedora 18 : file-roller-3.6.4-1.fc18 (2013-12653)

This update fixes CVE-2013-4668 : The File Roller archive manager for the GNOME desktop suffers from a path traversal vulnerability caused by insufficient path sanitization. A specially crafted archive file can be used to trigger creation of arbitrary files in any location, writable by the user...

CVE-2013-4668

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...

CVE-2013-4668

Summary (CVE-2013-4668): Directory traversal in GNOME File Roller when using libarchive, affecting 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, enables remote creation of arbitrary files via crafted archives that mishandle “Keep directory structure” paths. Root cause noted in f...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2010)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2010 advisory. - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet...

CVE-2012-4668

CVE-2012-4668 affects Roundcube Webmail (versions 0.8.1 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via the email signature field. The root cause is insufficient sanitization/exposure of the email signature i...

CVE-2012-4668

Cross-site scripting XSS vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email...

CVE-2012-4668

creationtimestamp| type| source ---|---|--- 2012-08-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20549...

CVE-2011-4668

The CVE-2011-4668 entry concerns IBM Tivoli Netcool/Reporter 2.2, specifically versions before 2.2.0.8. A remote code execution flaw is described where attackers may exploit vectors related to an unspecified CGI program used with the Apache HTTP Server to run arbitrary code. The available sources...

Fedora Update for kernel FEDORA-2011-16346

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2011-16346 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for kernel FEDORA-2011-15241

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2011-15241 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for kernel FEDORA-2011-14747

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2011-14747 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...