77 matches found
USN-700-1: Perl vulnerabilities
Jonathan Smith discovered that the Archive::Tar Perl module did not correctly handle symlinks when extracting archives. If a user or automated system were tricked into opening a specially crafted tar file, a remote attacker could over-write arbitrary files. CVE-2007-4829 Tavis Ormandy and Will...
Debian Security Advisory DSA 1683-1 (streamripper)
The remote host is missing an update to streamripper announced via advisory DSA 1683-1. OpenVAS Vulnerability Test $Id: deb16831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1683-1 streamripper Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
Debian DSA-1683-1 : streamripper - buffer overflow
Multiple buffer overflows involving HTTP header and playlist parsing have been discovered in streamripper CVE-2007-4337, CVE-2008-4829 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-168...
[SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1683-1 [email protected] http://www.debian.org/security/ Florian Weimer December 08, 2008 http://www.debian.org/security/faq -...
DSA-1683-1 streamripper - potential code execution
Bulletin has no description...
Streamripper Multiple Buffer Overflow Vulnerabilities - Windows
Streamripper is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-4829
Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via 1 a long "Zwitterion v" HTTP header, related to the httpparsescheader function; 2 a crafted pls playlist with a long entry, related to the httpgetpls function; or 3 a crafted m3u...
CVE-2008-4829
Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via 1 a long "Zwitterion v" HTTP header, related to the httpparsescheader function; 2 a crafted pls playlist with a long entry, related to the httpgetpls function; or 3 a crafted m3u...
CVE-2008-4829
CVE-2008-4829 affects the Streamripper project, with public sources describing multiple buffer overflows in lib/http.c (functions http_parse_sc_header, http_get_pls, http_get_m3u) triggered by overly long HTTP headers and playlists. Public reports (e.g., GLSA 200901-05, Debian DSA-1683-1, OpenVAS...
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
CVE-2007-4829
The CVE-2007-4829 entry concerns a directory-traversal flaw in the Archive::Tar Perl module (versions
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
CVE-2005-4829
Technical details about CVE-2005-4829 are not publicly provided in the connected documents. The descriptions lack specifics. Monitor for updates from vendors and security advisories.
CVE-2006-4829
CVE-2006-4829 describes multiple cross-site scripting (XSS) vulnerabilities in Blojsom 2.31, where remote attackers could inject arbitrary script or HTML via these blog post parameters: blog-category-description, blog-entry-title, rss-enclosure-url, technorati-tagsi, and blog-category-name. The a...
CVE-2005-4829
VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...
