1092 matches found
CVE-2009-1272
The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...
Input validation
The phpzipmakerelativepath function in phpzip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service crash via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that resolve several security issues are now available for Red Hat Enterprise Linux 5.2 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of...
JVN#50327700 PHP vulnerable to cross-site scripting
PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest upda...
HP Systems Insight Manager Unauthorized Access Vulnerability (Linux)
This host is running HP Systems Insight Manager SIM and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbhpsimunauthaccessvulnlin.nasl 4218 2016-10-05 14:20:48Z teissa $ HP Systems Insight Manager Unauthorized Access Vulnerability Linux Authors: Chandan S Copyright:...
HP Systems Insight Manager Unauthorized Access Vulnerability - Linux
HP Systems Insight Manager SIM is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HP Systems Insight Manager Unauthorized Access Vulnerability (Windows)
This host is running HP Systems Insight Manager SIM and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbhpsimunauthaccessvulnwin.nasl 5370 2017-02-20 15:24:26Z cfi $ HP Systems Insight Manager Unauthorized Access Vulnerability Windows Authors: Chandan S Copyright:...
CVE-2008-3658
Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...
Debian Security Advisory DSA 1619-1 (python-dns)
The remote host is missing an update to python-dns announced via advisory DSA 1619-1. OpenVAS Vulnerability Test $Id: deb16191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1619-1 python-dns Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-3658
Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...
CVE-2008-3425
Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System SPS 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors...
AIX 5.2 TL 10 : printers.rte (U815029)
The remote host is missing AIX PTF U815029, which is related to the security of the package printers.rte. Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid roo...
AIX 5.2 TL 10 : bos.acct (U817525)
The remote host is missing AIX PTF U817525, which is related to the security of the package bos.acct. The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The...
Code injection
The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service remote node crash by using chfs or lreducelv to reduce a filesystem's size...
CVE-2008-1594
The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service remote node crash by using chfs or lreducelv to reduce a filesystem's size...
CVE-2008-1593
The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the...
AIX 5.2 TL 10 : bos.net.uucp (U807849)
The remote host is missing AIX PTF U807849, which is related to the security of the package bos.net.uucp. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U807849. The text itself is copyright C...
Design/Logic Flaw
sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to "alter the behavior of" this client by overwriting these files...
CVE-2008-0586
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the 1 lchangevg, 2 ldeletepv, 3 putlvodm, 4 lvaryoffvg, and 5 lvgenminor programs in bos.rte.lvm; and the 6 tellclvmd program in bos.clvm.enh...