DEBIAN-CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

DEBIAN-CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

Buffer overflow

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

CVE-2009-0363 affects BarnOwl prior to 1.0.5 and Owl prior to 2.1.11. Multiple buffer overflows could allow remote code execution via (1) crafted zcrypt messages (zcrypt.c) or (2) a reply command on a message with a Zephyr Cc: list (zwrite.c), plus unspecified other uses. No patch/version fix is ...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3359

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

owl-xss.txt

Cross Site Scripting XSS in Owl alert1; Workaround/Fix: Replace your owl.lib.php with the version from http://owl.cvs.sourceforge.net/checkout/owl/owl-0.90/lib/owl.lib.php Disclosure Timeline: 2008-07-27 Vendor contacted 2008-07-28 Vendor: fixed issue in cvs / no need for new stable release...

CVE-2008-3100: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...

CVE-2008-3359: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100

Cross Site Scripting XSS in Owl =0.95, CVE-2008-3100 References: https://vulners.com/cve/CVE-2008-3100 http://owl.sourceforge.net/ http://www.datensalat.eu/fabian/cve/CVE-2008-3100-Owl.html Description: Owl is a multi user document repository knowledgebase system for publishing files/documents on...

Owl Intranet Engine 0.95 - 'register.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30410/info Owl Intranet Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Owl cross-site scripting vulnerability

Overview Owl, an open source document management and publishing system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. As a result, web pages could be spoofed. Solution...

Owl SQL injection vulnerability

Overview Owl, an open source document management and publishing system, contains an SQL injection vulnerability. Impact A remote attacker may modify or steal the database contents. Solution None...