Scientific Linux Security Update : openssh on SL4.x, SL5.x i386/x86_64

These packages fix a low severity flaw in the way ssh handles X11 cookies when creating X11 forwarding connections. When ssh was unable to create untrusted cookie, ssh used a trusted cookie instead, possibly allowing the administrative user of a untrusted remote server, or untrusted application r...

CVE-2011-4752

SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other files. NOTE: it is possible that only clients,...

CVE-2011-4752

CVE-2011-4752 concerns SmarterTools SmarterStats 6.2.4100, where incorrect Content-Type headers for certain resources may enable a remote impact through an interpretation conflict involving frmCustomReport.aspx and related files. Affected scope includes SmarterStats, though possible that only cli...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...

CVE-2010-4752

CVE-2010-4752 is a SQL injection vulnerability affecting LightNEasy 3.2.1 in LightNEasy.php. When magic_quotes_gpc is disabled, an attacker can exploit the page parameter to execute arbitrary SQL commands. This affects the input handling in LightNEasy.php (different vector from CVE-2008-6593 and ...

CVE-2010-4752

SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485. NOTE: the provenance of this information i...

CVE-2010-4752

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15060...

CVE-2009-4752

PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter...

CVE-2009-4752

CVE-2009-4752 affects Swinger Club Portal’san anzeiger/start.php component, enabling a PHP remote file inclusion through the go parameter. The underlying issue allows an attacker to execute arbitrary PHP code remotely. Public references indicate an RFI vulnerability with a CVSS v2 base score of 7...

CVE-2009-4752

PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter...

CentOS 4 / 5 : openssh (CESA-2008:0855)

Updated openssh packages are now available for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5, and Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHe...

SLES9: Security update for OpenSSH

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh openssh-askpass For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 501676...

SuSE9 Security Update : OpenSSH (YOU Patch Number 11931)

This update fixes a bug in ssh's cookie handling code. It does not properly handle the situation when an untrusted cookie cannot be created and uses a trusted X11 cookie instead. This allows attackers to violate the intended policy and gain privileges by causing an X client to be treated as...

CVE-2009-4752

creationtimestamp| type| source ---|---|--- 2009-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34792...

Mandriva Update for openssh MDKSA-2007:236 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDKSA-2007:236 openssh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2008-4752

TlNews 2.2 contains an authentication bypass: remote attackers can gain administrative access by setting the tlNews_login cookie to admin. The flaw allows bypass of login via cookie manipulation, enabling admin privileges. The CVE entry cites a base score of 7.5 (HIGH) under CVSS v2.0 with networ...

Gentoo Security Advisory GLSA 200711-02 (openssh)

The remote host is missing updates announced in advisory GLSA 200711-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-02 (openssh)

The remote host is missing updates announced in advisory GLSA 200711-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 4 / 5 : openssh (RHSA-2008:0855)

Updated openssh packages are now available for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5, and Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHe...

openssh security update

4.3p2-26.el52.1 - CVE-2007-4752 - Prevent ssh1 from using a trusted X11 cookie if creation of an untrusted cookie fails 280361...