Directory traversal

Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU PGTiou parameter...

Fedora Update for php-pear-CAS FEDORA-2010-12247

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-12247 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-pear-CAS FEDORA-2010-12258

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-12258 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for php-pear-CAS FEDORA-2010-12247

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-pear-CAS FEDORA-2010-12258

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : php-pear-CAS-1.1.2-1.fc14 (2010-12320)

Security fixes Fix a session hijacking hole CVE-2010-2795 PHPCAS-61 callbackurl in proxy mode should be urlencoded, possible XSS CVE-2010-2796 PHPCAS-67 Bug fixes Fix warnings for SAML responses without attributes PHPCAS-59 Fix duplicate SAML debug output PHPCAS-64 Providing a new ST/PT/SA during...

[SECURITY] Fedora 14 Update: php-pear-CAS-1.1.2-1.fc14

This package is a PEAR library for using a Central Authentication Service...

Fedora 12 : php-pear-CAS-1.1.2-1.fc12 (2010-12247)

Security fixes Fix a session hijacking hole CVE-2010-2795 PHPCAS-61 callbackurl in proxy mode should be urlencoded, possible XSS CVE-2010-2796 PHPCAS-67 Bug fixes Fix warnings for SAML responses without attributes PHPCAS-59 Fix duplicate SAML debug output PHPCAS-64 Providing a new ST/PT/SA during...

Fedora 13 : moodle-1.9.9-2.fc13 (2010-13250)

Multiple security fixes. No longer uses bundled php-pear-CAS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 12 : moodle-1.9.9-2.fc12 (2010-13254)

Multiple security fixes. No longer uses bundled php-pear-CAS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Unfixed Frame Redirect vulnerability at www.eads.com

Security researcher cAs, has submitted on 21/03/2010 a Frame Redirect vulnerability affecting www.eads.com, which at the time of submission ranked 75289 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently unfixed. If you...

Immunity Canvas: MS09_061_CAS

Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...

Microsoft GDI+ .NET Framework Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library within the .NET framework fails to properly handle certain API calls. Successful exploits can allow an attacker to execute arbitrary code with the privileges of the currently...

OwnRS Blog 1.2 SQL Injection

OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe,...

OwnRS Blog 1.2 (autor.php) SQL Injection Vulnerability

No description provided by source. OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz...

OwnRS Blog 1.2 - autor.php SQL Injection

OwnRS Blog 1.2 - autor.php SQL Injection OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greet...

Security fix for the ALT Linux 10 package gnutls30 version 2.6.3-alt1

Dec. 21, 2008 Afanasov Dmitry 2.6.3-alt1 - 2.6.3 release see NEW for details + Fix chain verification for chains that ends with RSA-MD2 CAs CVE-2008-4989 + Fix memory leak in PSK authentication. + gnutls-cli minor updates - return macroses that updates info's fix repocop warnings...

Security fix for the ALT Linux 9 package gnutls30 version 2.6.3-alt1

Dec. 21, 2008 Afanasov Dmitry 2.6.3-alt1 - 2.6.3 release see NEW for details + Fix chain verification for chains that ends with RSA-MD2 CAs CVE-2008-4989 + Fix memory leak in PSK authentication. + gnutls-cli minor updates - return macroses that updates info's fix repocop warnings...

CVE-2008-5100: Undefined Security Weakness

The strong name SN implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache GAC and Code...

CVE-2008-1155

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...