CVE-2010-5101

The TYPO3 CVE-2010-5101 entry documents a directory traversal vulnerability in TypoScript setup affecting TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5. The issue allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the file...

CVE-2009-5101

Pentaho BI Server 1.7.0.1062 and earlier is affected by CVE-2009-5101 due to including the JSESSIONID in the URL. The session ID can be obtained from session history, Referer headers, or by sniffing web traffic, enabling an attacker to hijack a user session. The CVSS base score is 5.0 (Medium) wi...

openSUSE Security Update : optipng (optipng-572)

Specially crafted BMP files could overflow a buffer in optipng CVE-2008-5101, specially crafted GIF files could crash optipng CVE-2009-0749. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

openSUSE 10 Security Update : optipng (optipng-6038)

Specially crafted BMP files could overflow a buffer in optipng CVE-2008-5101, specially crafted GIF files could crash optipng CVE-2009-0749. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

FreeBSD : optipng -- arbitrary code execution via crafted BMP image (2bc960c4-e665-11dd-afcd-00e0815b8da8)

Secunia reports : A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into...

[ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Gentoo Security Advisory GLSA 200812-01 (optipng)

The remote host is missing updates announced in advisory GLSA 200812-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-5101

OptiPNG vulnerability CVE-2008-5101: A buffer overflow in the BMP reader of OptiPNG 0.6 and 0.6.1 can be triggered by a crafted BMP image, enabling user-assisted arbitrary code execution. OpenVAS/Nessus entries link this to BMP-induced heap/buffer overflow and note affected packages across OpenSU...

CVE-2007-5101

ChironFS before 1.0 RC7 contains a local privilege escalation vulnerability. When files are created, the system sets user/group ownership to the mounter account instead of the creator account, enabling local users to gain privileges. Affected component: ChironFS (before 1.0 RC7). The issue stems ...

CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...