71 matches found
PT-2022-11289 · Man2Html +1 · Man2Html +1
Name of the Vulnerable Software and Affected Versions: man2html version 1.6g Description: The issue allows a filename to be created that overwrites the previous size parameter of the next chunk and the fd, bk, fd nextsize, bk nextsize of the current chunk. This results in the freeing of an...
CVE-2021-40647: Out-of-bounds Write
In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...
man2html 缓冲区错误漏洞
man2html is a pure manroff to html converter from the individual developer HAMANO Tsukasa in Japan. A buffer error vulnerability exists in man2html version 1.6g, which stems from a specific string read from a file will overwrite the size parameter in the top block of the heap...
DEBIAN-CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
Cross site scripting
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
CVE-2011-2770 is an XSS vulnerability in man2html.cgi.c (man2html 1.6 and possibly other versions) where error message handling fails to escape input, enabling remote attackers to inject arbitrary script/HTML via error-message vectors. Public references across NVD, Debian DSA-2335, RH advisories,...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
[SECURITY] [DSA 2335-1] man2html security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...
Debian DSA-2335-1 : man2html - missing input sanitization
Tim Starling discovered that the Debian-native CGI wrapper for man2html, a program to convert UNIX man pages to HTML, is not properly escaping user-supplied input when displaying various error messages. A remote attacker can exploit this flaw to conduct cross-site scripting XSS attacks...
[SECURITY] [DSA 2335-1] man2html security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...
DSA-2335-1 man2html - missing input sanitization
Bulletin has no description...
Debian Security Advisory DSA 035-1 (man2html)
The remote host is missing an update to man2html announced via advisory DSA 035-1. OpenVAS Vulnerability Test $Id: deb0351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 035-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 035-1 (man2html)
The remote host is missing an update to man2html announced via advisory DSA 035-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-035-1 : man2html - remote denial of service
It has been reported that one can tweak man2html remotely into consuming all available memory. This has been fixed by Nicolas Lichtmaier with help of Stephan Kulow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...
CVE-1999-1565
CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...