CVE-2009-2820

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

array index error in dtoa implementation of many products

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

Multiple Vendors CUPS HPGL Filter Remote Code Execution (CVE-2008-3641)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. There exis...

CVE-2009-3210

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3210

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3210

CVE-2009-3210 involves a vulnerability in Drupal’s Print (Printer, e-mail and PDF versions) module. Affected versions are Drupal 5.x prior to 5.x-4.8 and 6.x prior to 6.x-1.8. The issue is described as multiple cross-site scripting (XSS) vulnerabilities that allow remote authenticated users to in...

CVE-2009-3210: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.8 and 6.x before 6.x-1.8, a module for Drupal, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Code injection

in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service memory consumption via unspecified vectors that trigger a "fork/exec bomb."...

CVE-2009-2972

CVE-2009-2972 affects Sun Solaris 8/9; the in.lpd print service is vulnerable to a remote fork/exec() bomb that can cause higher memory usage and denial of service. Relevant patches exist: Solaris 8 (sparc) 109320-22 and 109321-22 (x86); Solaris 9 114980-31. No exploitation details are provided i...

CVE-2009-2972: Undefined Security Weakness

in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service memory consumption via unspecified vectors that trigger a "fork/exec bomb."...

CVE-2008-7075

Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...

[Full-disclosure] Drupal Print Module Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Date of Original Vendor Contact: May 27, 2009 Author: Justin C. Klein Keane [email protected] Details of this vulnerability are also posted at the public URL http://lampsecurity.org/drupal-print-module-vulnerabilities Descriptio...

Fedora 11 : viewvc-1.1.2-2.fc11 (2009-8507)

CHANGES in 1.1.2: - security fix: validate the 'view' parameter to avoid XSS attack - security fix: avoid printing illegal parameter names and values - add optional support for character encoding detection issue 400 - fix username case handling in svnauthz module issue 419 - fix cvsdbadmin/svnadm...

openSUSE Security Update : cups (cups-232)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian Security Advisory DSA 1823-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 1823-1. OpenVAS Vulnerability Test $Id: deb18231.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1823-1 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

DSA-1823-1 samba - several vulnerabilities

Bulletin has no description...

Sun Solaris 'lp'客户端本地拒绝服务漏洞

Bugraq ID: 35400 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在一个未明错误，本地攻击者可以利用漏洞取消root的打印作业。 此安全问题发生于安装了补丁127127-11 SPARC或127128-11的Solaris 10。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun...