94 matches found
python, tkinter security update
CentOS Errata and Security Advisory CESA-2012:0744 Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
python security update
2.4.3-46.el58.2 - if hash randomization is enabled, also enable it within pyexpat Resolves: CVE-2012-0876 2.4.3-46.el58.1 - distutils.commands.register: create /.pypirc securely Resolves: CVE-2011-4944 - send encoding in SimpleHTTPServer.listdirectory to protect IE7 against potential XSS attacks...
python 'distutils' Component '~/.pypirc'本地竞争条件漏洞
BUGTRAQ ID: 52732 CVE ID: CVE-2011-4944 Python是一种面向对象、直译式计算机程序设计语言，也是一种功能强大的通用型语言。 Python在distutils组件创建.pypirc的实现上存在本地竞争条件漏洞，可以访问受害者主目录的攻击者通过此漏洞可绕过某些权限限制，泄露敏感信息 0 Python 3.3 Python 3.2 Python 2.7 Python 2.6 Python 2.5.6 厂商补丁： Python ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： www.python.org...
SuSE 11.1 Security Update : glibc (SAT Patch Number 4944) (deprecated)
The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...
CVE-2010-4944
SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...
CVE-2008-4944
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder-out temporary files...
CVE-2008-4944
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder-out temporary files...
CVE-2008-4944
CVE-2008-4944 affects writtercontrol in cdcontrol 1.90. The vulnerability arises from a symlink attack on temporary files /tmp/v-recorder*-out, allowing local users to overwrite arbitrary files. The description and multiple references confirm local write access due to improper handling of tempora...
CVE-2007-4944
CVE-2007-4944 affects Opera 9.x before 9.22 on Linux, FreeBSD, and Solaris. The underlying issue is that canvas.createPattern does not clear memory before using it to process a new pattern, which can allow a remote attacker to read memory contents via JavaScript. The vulnerability is described ac...
CVE-2006-4944
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...
CVE-2006-4944
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...
CVE-2006-4944
CVE-2006-4944 is a PHP remote file inclusion vulnerability in ProgSys 0.151 and earlier. The flaw exists in includes/pear/Net/DNS/RR.php where an attacker can cause PHP code execution by supplying a crafted URL in the phpdns_basedir parameter. Public references indicate this can enable arbitrary ...
