UBUNTU-CVE-2012-5375

The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service prevention of file creation by leveraging the ability to write to a directory important to the victim, and creating a file with a crafted name that is associated with ...

dzX 2.0/2. 5 pass to kill 0day stored XSS a gold-bug warning-the black bar safety net

The vulnerability occurs in the plug attachment to the place. Says to plug in the Annex you tell me what also should be thought about certainly is the file name. Because the file name is in accordance with the local Upload File name to be displayed. If youroperating systemis a linux you can...

Foxit Reader Firefox Plugin URL File Name RCE

According to its version, the Foxit Reader installed on the remote Windows host is affected by an boundary error related to the Firefox plugin npFoxitReaderPlugin.dll due to improper processing of user-supplied input when handing an overly long file name in a URL query string. An unauthenticated,...

RHEL 5 : kernel (RHSA-2012:0358)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0358 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Using...

Scientific Linux Security Update : ruby on SL5.x i386/x86_64 (20130108)

It was found that certain methods did not sanitize file names before passing them to lower layer routines in Ruby. If a Ruby application created files with names based on untrusted input, it could result in the creation of files with different names than expected. CVE-2012-4522 It was found that...

DEBIAN-CVE-2012-6089

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted filename...

CVE-2012-5653

Removed by vendor...

Java write file file name 0 0 truncation BUG that caused file upload vulnerability and fix-vulnerability warning-the black bar safety net

Java in the above two environments to write the files, because 0 0 is truncated and not correct for the new generated file name. For example, the user needs to username abc. jsp . jpg, but after 0 0 after truncation, the resulting file name becomes the abc. jsp , therefore we are in relation to t...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

CVE-2012-5606

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 file name to apps/filesversions/js/versions.js or 2 apps/files/js/filelist.js; or 3 event title to 3rdparty/fullcalendar/js/fullcalendar.js...

CVE-2012-5606

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 file name to apps/filesversions/js/versions.js or 2 apps/files/js/filelist.js; or 3 event title to 3rdparty/fullcalendar/js/fullcalendar.js...

Quick-to-play player playlist file overflow-vulnerability warning-the black bar safety net

Processing the playlist file, in somewhere again quoting the file name there is no limit to the length and resulting overflow Version: ! ? wpl version="1.0"?& gt; smil head meta name="Generator" content="Nothing is true"/ titletest/title /head body seq media src="AAA...... AAAACRAAAAAAAAAA. wma"/...

FCKEditor 2.6.8 file upload and CKFinder/FCKEditor DoS vulnerability-vulnerability warning-the black bar safety net

Thanks to the endless in freebuf community”share the mission”to give a clue, only with this article Original post: http://club.freebuf.com/?/question/129reply12 FCKEditor 2.6.8 file upload vulnerability Exploit-db on the original as follows: - Title: FCKEditor 2.6.8 ASP Version File Upload...

DEBIAN-CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

UBUNTU-CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

PT-2012-5460 · Mcrypt · Mcrypt

Name of the Vulnerable Software and Affected Versions: mcrypt versions 2.6.8 and earlier Description: The issue allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. It is not clear whether this is a vulnerability...