CVE-2012-1095

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted 1 build log or 2 build status that contains an escape sequence for a terminal emulator...

CVE-2012-1095

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted 1 build log or 2 build status that contains an escape sequence for a terminal emulator...

CVE-2012-1095

The CVE-2012-1095 entry concerns osc before version 0.134, where an attacker-controlled build log or build status containing terminal escape sequences could allow remote command execution on OBS repository servers or by package maintainers. Connected sources confirm affected software: osc, with r...

OSC Visitor Web Stats SQL Injection

Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...

CVE-2008-0330

Open System Consultants (OSC) Radiator before 4.0 is vulnerable to a remote denial-of-service through malformed RADIUS requests, as demonstrated by nmap. The affected software is OSC Radiator (pre-4.0). The underlying cause is a handling flaw in processing RADIUS messages that allows crafted pack...