422 matches found
CVE-2011-3685
Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...
SuSE 11.1 Security Update : NFS (SAT Patch Number 4821)
When using wildcards in /etc/exports an attacker could gain unauthorized access to an NFS exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP. CVE-2011-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Nmap NSE net: nfs-ls
Attempts to get useful information about files from NFS exports. The output is intended to resemble the output of 'ls'. The script starts by enumerating and mounting the remote NFS exports. After that it performs an NFS GETATTR procedure call for each mounted point in order to get its ACLs. For...
FreeBSD -- Network ACL mishandling in mountd(8)
Problem Description: While parsing the exports5 table, a network mask in the form of "-network=netname/prefixlength" results in an incorrect network mask being computed if the prefix length is not a multiple of 8. For example, specifying the ACL for an export as "-network 192.0.2.0/23" would resu...
nfs-showmount NSE Script
Shows NFS exports, like the showmount -e command. Script Arguments mount.version, nfs.version, rpc.protocol See the documentation for the rpc library. Example Usage nmap -sV --script=nfs-showmount Script Output PORT STATE SERVICE 111/tcp open rpcbind | nfs-showmount: | /home/storage/backup...
CVE-2009-1844
Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...
FreeBSD : drupal -- XSS (a6605f4b-4067-11de-b444-001372fd0af2)
The Drupal Security Team reports : When outputting user-supplied data Drupal strips potentially dangerous HTML attributes and tags or escapes characters which have a special meaning in HTML. This output filtering secures the site against cross site scripting attacks via user input. Certain byte...
Debian Security Advisory DSA 1459-1 (gforge)
The remote host is missing an update to gforge announced via advisory DSA 1459-1. OpenVAS Vulnerability Test $Id: deb14591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1459-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
Sql injection
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
CVE-2008-0173
CVE-2008-0173 affects Gforge, with SQL injection in scripts related to RSS exports due to insufficient input validation in CGI parameters. Affected versions include 4.6.99 and earlier. Remote attackers could potentially execute arbitrary SQL commands via those parameters. Debian (DSA-1459-1) and ...
CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
DSA-1459-1 gforge - SQL injection
Bulletin has no description...
DSA-1279-1 webcalendar - missing input sanitising
Bulletin has no description...
CVE-2006-5158
The nlmclntmarkreclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service process crash and deny access to NFS exports via unspecified vectors that trigger a kernel oops null dereference and a deadlock...
CVE-2006-4554
Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including 1 Tumbleweed EMF, 2 VCOM/Ontrack PowerDesk Pro, 3 Canyon Drag and Zip, 4 Canyon Power File, and 5 Canyon Power File Gold, allow...
CVE-2003-0683
NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions...
CVE-2003-0683
CVE-2003-0683 refers to an SGI IRIX NFS export (/etc/exports) issue where configuration entries using wildcards without explicit hostnames or groups can bypass access checks, potentially allowing unintended access. The vulnerability affects SGI IRIX 6.5.x (notably 6.5.21m/6.5.21f according to his...