Tomboy: Privilege escalation

Background Tomboy is a desktop note-taking application. Description Tomboy places a zero-length directory name in the LDLIBRARYPATH, which might result in the current working directory . to be included when searching for dynamically linked libraries. NOTE: This vulnerability exists due to an...

Open-Xchange Security Advisory 2013-07-31

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 27473 Bug ID Vulnerability type: Phishing / Data injection Vulnerable version: 7.2.2 and earlier Vulnerable component: backend Fixed version: 7.2.2-rev9, 7.2.1-rev10, 7.2.0-rev11, 7.0.2-rev14 Solution status: Fixed by...

CVE-2013-4790

Open-Xchange AppSuite is affected by CVE-2013-4790. Versions prior to 7.0.2 rev14, 7.2.0 rev11, 7.2.1 rev10, and 7.2.2 rev9 rely on user-supplied data to predict the IMAP server hostname for an external domain, enabling remote authenticated users to discover other users’ email credentials through...

Open-Xchange AppSuite 7.2.2 Phishing / Data Injection

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 27473 Bug ID Vulnerability type: Phishing / Data injection Vulnerable version: 7.2.2 and earlier Vulnerable component: backend Fixed version: 7.2.2-rev9, 7.2.1-rev10, 7.2.0-rev11, 7.0.2-rev14 Solution status: Fixed by...

[security bulletin] HPSBMU02738 SSRT100748 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03171149Version: 1 HPSBMU02738 SSRT100748 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should...

CVE-2011-4790

HP Network Automation (versions 7.5x, 7.6x, 9.0, and 9.10) contains an unspecified vulnerability that allows remote code execution via unknown vectors. The HP security bulletin (HPSBMU02738) confirms impacted versions and provides a remediation path: upgrade to HP Network Automation 9.10.02 or la...

CVE-2010-4790

The CVE-2010-4790 issue affects FilterFTP versions 2.0.3, 2.0.5 (likely earlier) and is a directory traversal vulnerability. The underlying flaw is insufficient sanitization of filenames containing traversal sequences like .., allowing a remote FTP server to write arbitrary files on the target sy...

Mandriva Update for tomboy MDVSA-2011:035 (tomboy)

Check for the Version of tomboy OpenVAS Vulnerability Test Mandriva Update for tomboy MDVSA-2011:035 tomboy Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2009-4790

CVE-2009-4790 concerns Sysax Multi Server 4.5, where multiple directory traversal vulnerabilities allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. The description notes that provenance is unknown and details come from third‑party information. All connec...

SLES9: Security update for IBM Java2 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava2-SDK IBMJava2-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for IBM Java2 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava2-SDK IBMJava2-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SuSE9 Security Update : gnutls (YOU Patch Number 11228)

A security problem in the GNU TLS library has been found : If an RSA key with exponent 3 is used, the PKCS padding gets removed before generating a hash, which allows remote attackers to forge a PKCS signature that apapears to be signed by that RSA key and prevents gnutls from correctly verifying...

Mandriva Linux Security Advisory : tomboy (MDVSA-2008:064)

A flaw in how tomboy handles LDLIBRARYPATH was discovered where by appending paths to LDLIBRARYPATH the program would also search the current directory for shared libraries. In directories containing network data, those libraries could be injected into the application. The updated packages have...

CVE-2009-4790

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8256...

Ubuntu: Security Advisory (USN-560-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for tomboy FEDORA-2007-3253

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for blam FEDORA-2007-3798

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for blam FEDORA-2007-3792

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for blam FEDORA-2007-3962

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for blam FEDORA-2008-6127

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...