3308 matches found
RHEL 2.1 / 3 : samba (RHSA-2007:1013)
Updated samba packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...
samba security update
CentOS Errata and Security Advisory CESA-2007:1016 Updated samba packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by...
CVE-2007-5977
Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...
Ubuntu 5.10 : zope2.8 vulnerability (USN-317-1)
Zope did not deactivate the 'raw' command when exposing RestructuredText functionalities to untrusted users. A remote user with the privilege of editing Zope webpages with RestructuredText could exploit this to expose arbitrary files that can be read with the privileges of the Zope server. Note...
PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion
source: https://www.securityfocus.com/bid/26807/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the...
Ubuntu 6.06 LTS / 6.10 / 7.04 : krb5, librpcsecgss vulnerability (USN-511-2)
USN-511-1 fixed vulnerabilities in krb5 and librpcsecgss. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes the problem. It was discovered that the libraries handling RPCSECGSS did not correctly validate the size of certain...
PHP-Nuke 8.0 - autohtml.php Local File Inclusion
PHP-Nuke 8.0 - autohtml.php Local File Inclusion source: https://www.securityfocus.com/bid/26807/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and...
Debian DSA-1398-1 : perdition - format string error
Bernhard Mueller of SEC Consult has discovered a format string vulnerability in perdition, an IMAP proxy. This vulnerability could allow an unauthenticated remote user to run arbitrary code on the perdition server by providing a specially formatted IMAP tag. %NASLMINLEVEL 70300 C Tenable Network...
DSA-1398-1 perdition - format string vulnerability
Bulletin has no description...
i-Gallery 3.4 - igallery.asp Remote Information Disclosure
i-Gallery 3.4 - igallery.asp Remote Information Disclosure source: https://www.securityfocus.com/bid/26348/info i-Gallery is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote use...
CVE-2007-5539
Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...
CVE-2007-5491
Summary of CVE-2007-5491 family in SiteBar : The translation module (translator.php) in SiteBar 3.3.8 is vulnerable to a directory traversal attack via the lang parameter (using .. sequences), allowing remote authenticated users to chmod arbitrary files to 0777. Related entries (CVE-2007-5492, CV...
CVE-2007-5461
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...
Code injection
Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...
PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/25806/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the...
USN-511-1: Kerberos vulnerability
It was discovered that the libraries handling RPCSECGSS did not correctly validate the size of certain packet structures. An unauthenticated remote user could send a specially crafted request and execute arbitrary code with root privileges...
CVE-2007-4282
The CVE refers to the Serendipity CMS: the entryproperties plugin in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and deliver custom entryproperties settings to the frontend by manipulating the password check. Impact is described as an authentication bypass; n...
CVE-2007-3013
SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...
