RHEL 2.1 : python (RHSA-2007:1077)

Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive, object-oriented programming language. An integer...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-4597)

This update fixes a buffer overflow in Mono's BigInteger implementation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bytefx-data-mysql-4597. The text description of this plugin is C SUSE...

openSUSE 10 Security Update : mono-core (mono-core-2373)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...

CVE-2007-4784

The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...

CVE-2007-4462: Undefined Security Weakness

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file...

Remote file inclusion

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

Python 2.5 - PyLocale_strxfrm Remote Information Leak

Python 2.5 - PyLocalestrxfrm Remote Information Leak source: https://www.securityfocus.com/bid/23887/info Python applications that use the 'PyLocalestrxfrm' function are prone to an information leak. Exploiting this issue allows remote attackers to read portions of memory. Python 2.4.4-2 and 2.5...

CVE-2007-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

No description provided by source. E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== E-GADS! 2.2.6 common.php locale Remote File Inclusion Vulnerability ===================================================================== E-GADS! 2.2.6 Remote File...

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

sqllitemanager120-multi.txt

SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...

SQLiteManager v1.2.0 Multiple Vulnerabilities

SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...

Critical: Firefox security update

1.5.0.10-0.1.el4.0.1 - Replace default bookmarks and prefs 1.5.0.10-0.1.el4 - Update to 1.5.0.10 RC 1.5.0.9-0.2.el4 - Fix langpack support to start in the user's locale where possible...

Fedora Core 5 : mono-1.1.13.7-2.fc5.1 (2006-1012)

CVE-2006-5072 Mono insecure temporary file usage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2006-6151

PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6151

CVE-2006-6151 describes a PHP remote file inclusion in centre.php of Messagerie Locale. An attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter. The note indicates provenance is third-party information. The connected documents corroborate the vulnerability clas...

CVE-2006-6151: Undefined Security Weakness

PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...