CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

Null pointer dereference

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

DEBIAN-CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

PT-2008-1076 · Apple +1 · Cups +1

Name of the Vulnerable Software and Affected Versions: CUPS versions 1.3.9 and earlier cups-devel version 1.2.4 cups-libs version 1.2.4 cups-lpd version 1.2.4 cups version 1.2.4 Description: The issue allows local users, and possibly remote attackers, to cause a denial of service by adding a larg...

CUPS 1.3.7 CSRF (add rss subscription) Remote Crash Exploit

No description provided by source. !-- cat cupsdospoc.html -- script // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CUPS daemon to crash // by Adrian 'pagvac' Pastor | GNUCITIZEN.org forvar i=1;i=101;++i document.write"img width=0 height=0 " +...

CUPS 1.3.7 CSRF (add rss subscription) Remote Crash Exploit

Exploit for linux platform in category dos / poc =========================================================== CUPS 1.3.7 CSRF add rss subscription Remote Crash Exploit =========================================================== // make 101 CSRFed requests to CUPS daemon via 'img' tags // causes CU...

[SECURITY] Fedora 9 Update: evolution-rss-0.1.0-4.fc9

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 8 Update: liferea-1.4.15-5.fc8

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

[SECURITY] Fedora 8 Update: evolution-rss-0.0.8-13.fc8

This is an evolution plugin which enables evolution to read rss feeds...

[SECURITY] Fedora 8 Update: blam-1.8.3-19.fc8

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

CVE-2008-5053

PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader comrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

Immunity Canvas: JOOMLARSS_RFI

Name| joomlarssrfi ---|--- CVE| CVE-2008-5053 Exploit Pack| CANVAS Description| Joomla Simple RSS Reader Remote File Include Notes| CVSS: 10.0 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5053 CVE Name: CVE-2008-5053...

CVE-2008-5053

PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader comrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2008-5053

CVE-2008-5053 affects the Joomla! Simple RSS Reader (com_rssreader) 1.0. The vulnerability is a PHP remote file inclusion in admin.rssreader.php that allows an attacker to execute arbitrary PHP code by supplying a URL to mosConfig_live_site. The NVD entry lists a critical severity (CVSS v2: AV:N/...

Joomla Component Simple RSS Reader 1.0 RFI Vulnerability

No description provided by source. ================================================================================================================================ o Simple RSS Reader Component 1.0 Remote File Inclusion Vulnerability Software : comrssreader version 1.0 Vendor :...

Joomla! Component Simple RSS Reader 1.0 - Remote File Inclusion

Joomla! Component Simple RSS Reader 1.0 - Remote File Inclusion ================================================================================================================================ o Simple RSS Reader Component 1.0 Remote File Inclusion Vulnerability Software : comrssreader version 1....