CVE-2007-5894

MIT Kerberos 5 (krb5) is affected by CVE-2007-5894 and related issues (CVE-2007-5902, CVE-2007-5971, CVE-2007-5972) as described in multiple advisories. The core item in CVE-2007-5894 concerns an uninitialized length variable in the gssftp ftpd handling (krb5’s GSSAPI/KDC stack), with vendor note...

CVE-2006-5894

The CVE-2006-5894 entry documents a directory traversal flaw in Rama CMS 0.68 and earlier. When register_globals is enabled, an attacker can cause lang.php to include and execute arbitrary local files via a .. in the lang cookie, demonstrated by injecting PHP sequences into an Apache log file tha...