SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 5767)

Missing sanity checks of FTP URLs allowed cross-site scripting XSS attacks via the modprodyftp module. CVE-2008-2939 Missing precautions allowed cross-site request forgery CSRF via the modproxybalancer interface. CVE-2007-6420 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2007-5767

CVE-2007-5767 concerns a heap-based buffer overflow in Novell BorderManager 3.8’s Client Trust (clntrust.exe) that listens on UDP 3024. During a validation request, copying of the Novell tree name does not stop at a wide-character backslash or NULL, allowing overflow of a static buffer via wsprin...

CVE-2006-5767

The CVE-2006-5767 entry describes a PHP remote file inclusion in Drake CMS