CVE-2016-6318

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain privileges via a long GECOS field, involving longbuffer...

CVE-2016-6318

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain privileges via a long GECOS field, involving longbuffer...

SUSE SLES11 Security Update : cracklib (SUSE-SU-2016:2211-1)

This update for cracklib fixes a security issue and a bug: Security issue fixed : - Add patch to fix a stack-based buffer overflow in GECOS parser bsc992966 CVE-2016-6318 The following non security issue was fixed : - Call textdomain in cracklib-check main function so that program output is...

[SECURITY] [DLA 599-1] cracklib2 security update

Package : cracklib2 Version : 2.8.19-3+deb7u1 CVE ID : CVE-2016-6318 Debian Bug : 834502 It was discovered that there was a stack-based buffer overflow when parsing large GECOS fields in cracklib2, a pro-active password checker library. For Debian 7 "Wheezy", this issue has been fixed in cracklib...

CVE-2016-6318

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service application crash or gain privileges via a long GECOS field, involving longbuffer...

fj-n-tax.gov.cn IFRAME Injection vulnerability

Vulnerable URL: http://www.fj-n-tax.gov.cn/wssw/jsp/index/common/firstlogin.jsp?styleName=%22%3E%3Ccenter%3E%3Ciframe%20src=https://www.openbugbounty.org%20width=%221200%22%20height=%22900%22%3E%3C=0=0=fj Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection...

Cisco TelePresence VCS Expressway 8.5.1 / 8.5.2 request-xconfdump Symbolic Link Local File Manipulation (cisco-sa-20141007-vcs)

According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS Expressway running on the remote host is affected by a file manipulation vulnerability in request-xconfdump due to insufficient protection of files. An authenticated, local attacker can explo...

CVE-2015-6318

Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...

CVE-2014-6318

CVE-2014-6318 refers to a vulnerability in the Remote Desktop Protocol (RDP) audit logon feature across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1). The issue is that failed login attempts with valid credentials are not properly logged, ...

Microsoft Windows Remote Desktop Protocol CVE-2014-6318 Security Bypass Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a security-bypass vulnerability. Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows...

CVE-2013-6318

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote attackers to inject arbitrary web script or HTML via...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

This module exploits a stack-based buffer overflow in Ultra Shareware's Office Control. When processing the 'HttpUpload' method, the arguments are concatenated together to form a command line to run a bundled version of cURL. If the command fails to run, a stack-based buffer overflow occurs when...

Directory traversal

Directory traversal vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflang parameter, a different issue than CVE-2008-6318. NOTE: this might be the same issue as CVE-2008-631...

CVE-2008-6318

CVE-2008-6318 affects PHPmyGallery 1.5 beta and is a PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php. An attacker can cause arbitrary PHP execution by supplying a URL in the admindir parameter, a different vector than CVE-2008-6317. The available documents describe ...

CVE-2008-6318

PHP remote file inclusion vulnerability in conf/php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter, a different vector than CVE-2008-6317...

CVE-2008-6318

creationtimestamp| type| source ---|---|--- 2008-12-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7399...

ELOG < 2.6.2-7 DoS Vulnerability

ELOG is prone to a denial of service DoS vulnerability by requesting SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian: Security Advisory (DSA-1242-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : wordpress-2.3.2-1.fc8 (2008-0103)

This closes : http://www.blackhatdomainer.com/how-to-know-today-what-shoemoney-is-go ing-to-post-tomorrow/ http://www.securityfocus.com/archive/1/485252/30/0/threaded http://trac.wordpress.org/ticket/5487 Note that Tenable Network Security has extracted the preceding description block directly fr...

CVE-2007-6318

CVE-2007-6318 is a SQL injection vulnerability in WordPress, affecting wp-includes/query.php in WordPress 2.3.1 and earlier. The issue allows remote attackers to alter the database via the s parameter when DB_CHARSET is set to encodings that support a backslash in multibyte characters (e.g., Big5...