80 matches found
CVE-2011-4743
The CVE-2011-4743 entry concerns Parallels Plesk Panel 10.2.0, build 20110407.20, where the Control Panel omits the Content-Type header’s charset parameter for certain resources. This could allow remote attackers to cause an unspecified impact by exploiting an interpretation conflict involving sm...
Fedora 13 : abcm2ps-5.9.21-1.fc13 (2011-1851)
New release 5.9.21 with fixes for several security vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2010-4743
Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441. NOTE: some of these details are obtained from third party information...
CVE-2010-4743
CVE-2010-4743 is a heap-based buffer overflow in the getarena() function of abc2ps.c in abcm2ps prior to 5.9.13, enabling remote code execution via a crafted ABC file. The issue is part of a set of vulnerabilities affecting abcm2ps (including CVE-2010-3441 and CVE-2010-4744). Remediation in the c...
CVE-2009-4743
CVE-2009-4743 affects AfterLogic WebMail Pro versions up to 4.7.10, via XSS in history-storage.aspx. The vulnerability is triggered by specially crafted HistoryStorageObjectName and HistoryKey parameters, allowing remote attackers to inject arbitrary web script/HTML and execute in the victim’s br...
CVE-2009-4743
creationtimestamp| type| source ---|---|--- 2009-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9857 2009-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33268...
CVE-2008-4743
CVE-2008-4743 is an SQL injection vulnerability in QuidaScript’s FAQ Management Script, specifically in index.php where the catid parameter is used unsafely. The affected component is the index.php handler within the QuidaScript FAQ Management Script, with the underlying cause being improper hand...
CVE-2008-4743
creationtimestamp| type| source ---|---|--- 2008-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6629...
SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)
This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 / CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
openSUSE 10 Security Update : krb5 (krb5-4248)
This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 and CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
[SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1387 [email protected] http://www.debian.org/security/ Florian Weimer October 15th, 2007 http://www.debian.org/security/faq -...
RHEL 5 : krb5 (RHSA-2007:0892)
Updated krb5 packages that correct a security flaw are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate t...
CVE-2007-4743
The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...
CVE-2007-4743
The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...
CVE-2006-4743
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...
CVE-2006-4743
CVE-2006-4743 affects WordPress 2.0.2 through 2.0.5, allowing remote attackers to obtain sensitive information by requesting specific PHP files (e.g., 404.php, akismet.php, archive.php, etc.), which causes error messages that reveal internal paths. The connected documents corroborate the list of ...
