Lucene search
+L

971 matches found

NVD
NVD
added 2011/03/03 1:0 a.m.23 views

CVE-2011-1072

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...

3.3CVSS6AI score0.00492EPSS
SaveExploits1References19
Prion
Prion
added 2011/03/03 1:0 a.m.31 views

Design/Logic Flaw

The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for...

3.3CVSS6.4AI score0.00492EPSS
SaveExploits1References8Affected Software1
Prion
Prion
added 2011/03/03 1:0 a.m.22 views

Design/Logic Flaw

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...

3.3CVSS6.3AI score0.07288EPSS
SaveExploits3References19Affected Software1
Cvelist
Cvelist
added 2011/03/03 12:0 a.m.43 views

CVE-2011-1144

The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for...

8.9AI score0.00311EPSS
SaveExploits0References8
CVE
CVE
added 2011/03/03 12:0 a.m.96 views

CVE-2011-1072

The connected Nessus/NASL entries confirm CVE-2011-1072 affects the PEAR installer prior to 1.9.2, enabling local users to overwrite arbitrary files via a symlink on package.xml, related to download_dir, cache_dir, tmp_dir, and pear-build-download directories. The MiracleLinux advisory references...

3.3CVSS8.5AI score0.00492EPSS
SaveExploits1References19Affected Software1
Cvelist
Cvelist
added 2011/03/03 12:0 a.m.41 views

CVE-2011-1072

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...

8.8AI score0.00492EPSS
SaveExploits1References19
CVE
CVE
added 2011/03/03 12:0 a.m.81 views

CVE-2011-1144

CVE-2011-1144 concerns the PEAR installer prior to 1.9.2. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on package.xml, related to the download_dir, cache_dir, tmp_dir, and pear-build-download directories. The issue exists because of an incomplete fix for ...

3.3CVSS8.7AI score0.00311EPSS
SaveExploits0References8Affected Software1
UbuntuCve
UbuntuCve
added 2011/03/02 12:0 a.m.62 views

CVE-2011-1072

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...

3.3CVSS5.9AI score0.00492EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2011/03/02 12:0 a.m.37 views

CVE-2011-1144

The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for...

3.3CVSS5.9AI score0.00311EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.16 views

Fedora Update for php-pear-CAS FEDORA-2010-15796

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-15796 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.4CVSS0.1AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.16 views

Fedora Update for php-pear-CAS FEDORA-2010-15796

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS6.5AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.17 views

Fedora Update for php-pear-CAS FEDORA-2010-12320

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-12320 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4CVSS0.1AI score0.02517EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/12/02 12:0 a.m.14 views

Fedora Update for php-pear-CAS FEDORA-2010-12320

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4CVSS6.5AI score0.02517EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2010/10/28 12:0 a.m.27 views

openSUSE Security Update : php5-pear-mail (openSUSE-SU-2010:0909-1)

Passing specially crafted $from and $recepient arguments to php5-pear-mail's sendmail.php allowed attackers to inject shell code CVE-2009-4023, CVE-2009-4111. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

7.5CVSS5.3AI score0.02402EPSS
SaveExploits3References5
OpenVAS
OpenVAS
added 2010/10/22 12:0 a.m.18 views

Fedora Update for php-pear-CAS FEDORA-2010-15970

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS6.5AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/10/22 12:0 a.m.17 views

Fedora Update for php-pear-CAS FEDORA-2010-15943

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.4CVSS6.5AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/10/22 12:0 a.m.19 views

Fedora Update for php-pear-CAS FEDORA-2010-15943

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-15943 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.4CVSS6.4AI score0.03626EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/10/22 12:0 a.m.25 views

Fedora Update for php-pear-CAS FEDORA-2010-15970

Check for the Version of php-pear-CAS OpenVAS Vulnerability Test Fedora Update for php-pear-CAS FEDORA-2010-15970 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.4CVSS0.03626EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2010/10/20 12:0 a.m.35 views

Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

6.4CVSS5.4AI score0.03626EPSS
SaveExploits0References4
Fedora
Fedora
added 2010/10/19 7:20 a.m.26 views

[SECURITY] Fedora 12 Update: php-pear-CAS-1.1.3-1.fc12

This package is a PEAR library for using a Central Authentication Service...

6.4CVSS3.1AI score0.03626EPSS
SaveExploits0
Rows per page
Query Builder