[SECURITY] [DSA 2179-1] dtc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2179-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

DSA-2179-1 dtc - SQL injection

Bulletin has no description...

Sql injection

SQL injection vulnerability in client/newaccount.php in Domain Technologie Control DTC before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the 1 familyname, 2 christname, 3 companyname, 4 iscompany, 5 email, 6 phone, 7 fax, 8 addr1, 9 addr2, 10 addr3, 11 zipcode, 12 city,...

CVE-2009-0402

Domain Technologie Control (DTC) is affected by CVE-2009-0402 due to an SQL injection in client/new_account.php present before version 0.29.16. The vulnerability arises from unsafely inserting input from 15 parameters (familyname, christname, company_name, is_company, email, phone, fax, addr1, ad...

CVE-2009-0402

SQL injection vulnerability in client/newaccount.php in Domain Technologie Control DTC before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the 1 familyname, 2 christname, 3 companyname, 4 iscompany, 5 email, 6 phone, 7 fax, 8 addr1, 9 addr2, 10 addr3, 11 zipcode, 12 city,...

CVE-2009-0402: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in client/newaccount.php in Domain Technologie Control DTC before 0.29.16 allows remote attackers to execute arbitrary SQL commands via the 1 familyname, 2 christname, 3 companyname, 4 iscompany, 5 email, 6 phone, 7 fax, 8 addr1, 9 addr2, 10 addr3, 11 zipcode, 12 city,...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

Code injection

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4951

CVE-2008-4951 affects dtc 0.29.6, enabling local users to overwrite arbitrary files through a symlink attack on /tmp/awstats.log, /tmp/spam.log.#####, and /tmp/spam_err.log, related to the accesslog.php and sa-wrapper scripts. The cited sources (NVD, SUSE, Ubuntu, CVE records) confirm the local a...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4951: Improper Link Resolution Before File Access

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

php -- php_variables memory disclosure

The remote host is missing an update to the system as announced in the referenced advisory. VID ad74a1bd-16d2-11d9-bc4a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

php -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. VID 7fcf1727-be71-11db-b2ec-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

php -- strip_tags cross-site scripting vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. VID edf61c61-0f07-11d9-8393-000103ccf9d6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

php -- readfile() DoS vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. VID 07f3fe15-a9de-11d9-a788-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: php4, php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

php -- memory_limit related vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PHP -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...