SuSE 10 Security Update : compat-curl2 (ZYPP Patch Number 6408)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 Additionally the arbitrary file access problem was fixed. CVE-2009-0037 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2008-6408

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

CVE-2008-6408

CVE-2008-6408 describes a PHP remote file inclusion in frame.php of ol’bookmarks manager 0.7.5. The vulnerability allows an attacker to cause the application to include a remote file by supplying a URL in the framefile parameter, enabling arbitrary PHP code execution on the server. The reported i...

CVE-2008-6408

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

CVE-2008-6408

creationtimestamp| type| source ---|---|--- 2008-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6547...

CVE-2007-6408

IBM Tivoli Provisioning Manager Express is affected by a vulnerability where error messages disclose information during username duplication or login with a valid username, enabling remote attackers to enumerate usernames. The connected documents do not provide concrete exploit details or a remed...

CVE-2006-6408

CVE-2006-6408 affects Kaspersky Anti-Virus for Linux Mail Servers 5.5.10. The issue allows remote attackers to bypass virus detection by inserting invalid characters into base64-encoded content within a multipart/mixed MIME file (as demonstrated with the EICAR test file). The CVSS shows network a...