230 matches found
GNU Bash Local Environment Variable Handling Command Injection via Telnet (CVE-2014-7169) (Shellshock)
The remote host is running a version of Bash that is vulnerable to command injection via environment variable manipulation. Depending on the configuration of the system, an attacker could remotely execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Design/Logic Flaw
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the modcgi and modcg...
bash -- remote code execution vulnerability
Chet Ramey reports: Under certain circumstances, bash will execute user code while processing the environment for exported function definitions. The original fix released for CVE-2014-6271 was not adequate. A similar vulnerability was discovered and tagged as CVE-2014-7169...
Important: bash
Issue Overview: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vecto...
Bash Command Injection Vulnerability
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-269-01 Bash Command Injection Vulnerability that was published September 26, 2014, on the NCCIC/ICS‑CERT web site. A command injection vulnerability has been reported in the Bourne again shell bash. Bash is the...
SuSE 10 Security Update : bzip2 (ZYPP Patch Number 7169)
This update fixes an integer overflow in the BZ2decompress function of bzip2/libbz2. This can be exploited via a crafted archive to cause a denial of service or even execute arbitrary code. CVE-2010-0405 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...
CVE-2008-7169
The CVE-2008-7169 entry concerns a SQL injection in the Joomla! Jabode horoscope extension (com_jabode). The vulnerability enables remote attackers to execute arbitrary SQL commands via the id parameter in a sign task to index.php. Affected software is Jabode’s com_jabode within Joomla!; the unde...
CVE-2008-7169
creationtimestamp| type| source ---|---|--- 2008-06-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5963...
CVE-2006-7169
CVE-2006-7169 describes a PHP remote file inclusion in Ultimate PHP Board (UPB) 2.0 and earlier . The vulnerability affects the file includes/header_simple.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the _CONFIG[skin_dir] parameter. Public references indica...