Linux kernel local filesystem DoS

The 1 reallookup and 2 lookuphash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted aka SDEAD directory, which allows local users to cause a denial of service "overflow" of the UBIFS orphan area via a...

CVE-2008-5598

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. dot dot in the group parameter...

Directory traversal

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. dot dot in the group parameter...

CVE-2008-5299

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...

CVE-2008-5299

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...

CVE-2008-5298

chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service chm2pdf failure of other users by creating those directories ahead of time...

CVE-2008-5299

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...

CVE-2008-5298

Removed by vendor...

CVE-2008-5299

Removed by vendor...

CVE-2008-5299

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...

USN-679-1: Linux kernel vulnerabilities

It was discovered that the Xen hypervisor block driver did not correctly validate requests. A user with root privileges in a guest OS could make a malicious IO request with a large number of blocks that would crash the host OS, leading to a denial of service. This only affected Ubuntu 7.10...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...

U-Mail Webmail 4.91 - 'edit.php' Arbitrary File Write

U-Mail Webmail Arbitrary File Write Vulnerability ================================================== Vulnerable: U-Mail 4.91 Vendors: www.comingchina.com Category: Input Validation Error Impact: An attacker can write arbitrary data to new files. Author: Shennan Wang Date: 2008-10-30 Web:...

Update Protection against Rhino Software Serv-U FTP Server RNTO Command Directory Traversal

A directory traversal vulnerability was reported in Serv-U FTP Server. Serv-U is a widely-used FTP server that includes advanced features such as SSL support, ODBC, virtual directories and more. This vulnerability allows a remote authenticated attacker to access normally-inaccessible files and...

HTTP NIDS evasion

This plugin configures OpenVAS for NIDS evasion see the SPDX-FileCopyrightText: 2008 Michel Arboi / Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only The HTTP IDS evasion...

Linux kernel local filesystem DoS

The 1 reallookup and 2 lookuphash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted aka SDEAD directory, which allows local users to cause a denial of service "overflow" of the UBIFS orphan area via a...

Linux kernel local filesystem DoS

The 1 reallookup and 2 lookuphash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted aka SDEAD directory, which allows local users to cause a denial of service "overflow" of the UBIFS orphan area via a...

Gentoo Security Advisory GLSA 200409-33 (net=www/apache)

The remote host is missing updates announced in advisory GLSA 200409-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-33 (net=www/apache)

The remote host is missing updates announced in advisory GLSA 200409-33. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...