110 matches found
CVE-2010-5298
Race condition in the ssl3readbytes function in s3pkt.c in OpenSSL through 1.0.1g, when SSLMODERELEASEBUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service use-after-free and parsing error via an SSL connection in a multithreaded environment...
CVE-2010-5298
CVE-2010-5298 – OpenSSL race condition in ssl3_read_bytes (s3_pkt.c) . OpenSSL versions up to 1.0.1g are affected when SSL_MODE_RELEASE_BUFFERS is enabled, enabling a remote attacker to inject data across sessions or cause a denial of service (use-after-free and parsing error) over an SSL connect...
CVE-2012-5298
CVE-2012-5298 concerns Mavili Guestbook (released November 2007). The vulnerability arises because guestbook.mdb is stored under the web root with insufficient access control, allowing remote attackers to read the database by direct request. The impact is exposure of guestbook data; exploitation ...
Fedora Update for chm2pdf FEDORA-2011-0454
Check for the Version of chm2pdf OpenVAS Vulnerability Test Fedora Update for chm2pdf FEDORA-2011-0454 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2008-5298
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service chm2pdf failure of other users by creating those directories ahead of time...
CVE-2008-5298
CVE-2008-5298 affects chm2pdf 0.9, where insecure handling of fixed named temporary directories can be exploited locally to cause a denial of service (chm2pdf failure). OpenVAS/Nessus/Fedora advisories note updates (Fedora 2011-0454/2011-0467) addressing this issue. The provided documents do not ...
CVE-2007-5298
CVE-2007-5298 describes multiple PHP remote file inclusion vulnerabilities in the CMS Creamotion. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL in the cfg[document_uri] parameter to two admin scripts: _administration/securite.php and _administration/ges...
CVE-2006-5298
The muttadvmktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safefopen function cal...
CVE-2006-5298
The CVE-2006-5298 issue affects Mutt 1.5.12 and earlier, where mutt_adv_mktemp may fail to ensure temporary files are created with restricted permissions, enabling a local user to create files with weak permissions via a race between mktemp and safe_fopen. Multiple connected advisories (Ubuntu US...