CVE-2011-2508

CVE-2011-2508 affects phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1. A directory traversal via a crafted GLOBALS[mime_map][$meta->name][transformation] parameter allows remote authenticated users to perform local file inclusion and potentially execute local files. Root cause: insecur...

CVE-2011-2508

Directory traversal vulnerability in libraries/displaytbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in a...

phpMyAdmin 3.3.x < 3.3.10.2 / 3.4.x < 3.4.3.1 Multiple Vulnerabilities

Binary data 5985.prm...

PT-2011-3907

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.x prior to 3.3.10.2 phpMyAdmin versions 3.4.x prior to 3.4.3.1 Description The issue allows remote authenticated users to include and execute arbitrary local files. This is possible when a certain MIME transformation...

Fedora Update for mutt FEDORA-2011-7739

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2011-7739 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Mozilla Products Multiple Vulnerabilities - 01 - (Jul 2011) - Windows

Mozilla Firefox, Seamonkey or Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : phpmyadmin -- multiple vulnerabilities (7e4e5c53-a56c-11e0-b180-00216aa06fc2)

The phpMyAdmin development team reports : It was possible to manipulate the PHP session superglobal using some of the Swekey authentication code. This could open a path for other attacks. An unsanitized key from the Servers array is written in a comment of the generated config. An attacker can...

phpmyadmin -- multiple vulnerabilities

The phpMyAdmin development team reports: It was possible to manipulate the PHP session superglobal using some of the Swekey authentication code. This could open a path for other attacks. An unsanitized key from the Servers array is written in a comment of the generated config. An attacker can...

Possible directory traversal.

PMASA-2011-8 Announcement-ID: PMASA-2011-8 Date: 2011-07-02 Summary Possible directory traversal. Description Fixed filtering of a file path in the MIME-type transformation code, which allowed for directory traversal. Severity We consider this vulnerability to be serious. Affected Versions The...

Fedora Update for mutt FEDORA-2011-7756

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2011-7756 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2011-1894

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows...

Information disclosure

Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different 1 domain or 2 zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."...

CVE-2011-1246

Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different 1 domain or 2 zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."...

Microsoft Internet Explorer 8 MIME嗅探信息泄露漏洞

Bugtraq ID: 48200 CVE ID：CVE-2011-1246 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 下载某些内容时存在错误可被利用执行部分不可期的操作，获取其他域或Internet Explorer中的某些MIME信息。 Microsoft Internet Explorer 8 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://www.microsoft.com/technet/security/Bulletin/MS11-050.mspx...

CVE-2011-1894: Improper Neutralization of Input During Web Page Generation

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for embedded content in an HTML document, which allows...

CVE-2011-1246: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 8 does not properly handle content settings in HTTP responses, which allows remote web servers to obtain sensitive information from a different 1 domain or 2 zone via a crafted response, aka "MIME Sniffing Information Disclosure Vulnerability."...

Microsoft Windows MHTML Mime-格式化请求信息泄露漏洞

Bugtraq ID: 48205 CVE ID：CVE-2011-1894 Microsoft Windows是一款流行的操作系统。 MHTML聚合HTML MIME封装协议处理器解析MIME格式化请求存在错误，攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或劫持用户会话 Microsoft Windows XP Professional SP3 Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft...

Windows MHTML Information Disclosure Vulnerability (2544893)

This host is missing an important security update according to Microsoft Bulletin MS11-037. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...

Design/Logic Flaw

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...