107 matches found
UBUNTU-CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
CVE-2015-8771
CVE-2015-8771 affects GOsa: the generate_smb_nt_hash function in include/functions.inc allows a remote attacker to execute arbitrary commands via a crafted password. Multiple connected sources (CNVD, OSS/OSV equivalents, Debian advisories, and NVD entry) corroborate the same issue. The vulnerabil...
CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
CVE-2014-9760
GOsa contains a cross-site scripting (XSS) vulnerability in the displayLogin function (html/index.php). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the username parameter. The available documents do not specify affected versions, root cause beyond the inpu...
PT-2017-7475
Name of the Vulnerable Software and Affected Versions GOsa affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via a crafted password, specifically through the generate smb nt hash function in include/functions.inc. Recommendations At the...
CVE-2015-8771: Improper Control of Generation of Code
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
PT-2017-6395
Name of the Vulnerable Software and Affected Versions GOsa affected versions not specified Description A cross-site scripting XSS issue exists in the displayLogin function in html/index.php, allowing remote attackers to inject arbitrary web script or HTML via the username variable. This could...
CVE-2014-9760: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
Debian DLA-562-1 : gosa security update
GOsa² is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. A code injection vulnerability in the Samba plugin code of GOsa has been discovered. During Samba password changes it has been possible to inject malicious Perl code. If you upgrade...
[SECURITY] [DLA 562-1] gosa security update
Package : gosa Version : 2.7.4-4.3deb7u3 CVE ID : CVE-2015-8771 GOsa² is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. A code injection vulnerability in the Samba plugin code of GOsa has been discovered. During Samba password changes it ha...
DLA-562-1 gosa - security update
Bulletin has no description...
Debian DLA-408-1 : gosa security update
GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes it has been possible to inject malicious Perl code. This upload to...
[SECURITY] [DLA 408-1] gosa security update
Package : gosa Version : 2.6.11-3+squeeze5 CVE ID : CVE-2015-8771 GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes i...