ecryptfs-utils: potential provided password disclosure in the process table

The 1 ecryptfs-setup-private, 2 ecryptfs-setup-confidential, and 3 ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process...

CVE-2008-7141

Cross-site scripting XSS vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the languagesetup parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 languagesetup parameter to setup.php or 2 test parameter to index.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-7140

Multiple cross-site scripting XSS vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 languagesetup parameter to setup.php or 2 test parameter to index.php. NOTE: the provenance of this information is unknown; the details are...

RealNetworks Helix Server RTSP SETUP Request Denial of Service (CVE-2009-2534)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A denial of service vulnerability has been reported in RealNetworks Helix Server. The vulnerability is due to an error in the way RealNetworks Helix Server handles SETUP requests. A remote...

MDVA-2009:105 : fuse

FUSE default setup was requiring non privileged users to be added manually to fuse group to be able to use fuse feature and this feature was not available immediatly after fuse package installation. This package updates ensure fuse is now immediatly available after package installation and for al...

RealNetworks Helix Server 12.x Multiple DoS

Binary data 5100.prm...

RealNetworks Helix Server < 13.0.0 Multiple Remote DoS

According to its banner, The remote host is running version 12.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are reportedly affected by multiple issues : - By sending a specially crafted 'RTSP' SETPARAMETERS request with a 'DataConvertBuffer' parameter and either no...

Denial of service

RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service daemon crash via an RTSP SETUP request that 1 specifies the / URI or 2 lacks a / character in the URI...

CVE-2009-2534

CVE-2009-2534 affects RealNetworks Helix Server and Helix Mobile Server prior to 13.0.0. The DoS arises from handling RTSP SETUP requests: if the request URI lacks a "/" character (or in some cases a malformed path), the server crashes, potentially terminating the process. Core Security’s CORE-20...

Real Helix Server DoS

DoS on RTSP and SETUP requests handling...

CORE-2009-0227: Real Helix DNA RTSP and SETUP request handler vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Real Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP request handler vulnerabilities Advisory ID...

Core Security Technologies Advisory 2009.0227

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Real Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP request handler vulnerabilities Advisory ID...

Real Helix DNA RTSP and SETUP Request Handler Vulnerabilities

Exploit for multiple platform in category dos / poc ============================================================= Real Helix DNA RTSP and SETUP Request Handler Vulnerabilities ============================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security...

Real Helix DNA RTSP and SETUP request handler vulnerabilities

Core Security - CoreLabsReal Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP request handler vulnerabilities Advisory ID: CORE-2009-0227 Advisory URL: http://www.coresecurity.com/content/real-helix-dna Date published: 2009-07-1...

Real Helix DNA - 'RTSP' / 'SETUP' Request Handler

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Real Helix DNA RTSP and SETUP request handler vulnerabilities 1. Advisory Information Title: Real Helix DNA RTSP and SETUP request handler vulnerabilities Advisory ID...

CVE-2009-2444

The CVE-2009-2444 vulnerability affects ADbNewsSender and allows directory traversal through path_to_lang in setup/index.php, enabling remote inclusion and execution of local files. Affected versions are ADbNewsSender before 1.5.6 and 2.0 before RC2. The CVSS2 base score is 7.5 (HIGH) with NETWOR...

GLSA-200906-03 : phpMyAdmin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200906-03 phpMyAdmin: Multiple vulnerabilities Multiple vulnerabilities have been reported in phpMyAdmin: Greg Ose discovered that the setup script does not sanitize input properly, leading to the injection of arbitrary PHP code...

Fedora 11 : rt3-3.8.2-8.fc11 (2009-6899)

Fri Jun 19 2009 Ralf Corsepius - 3.8.2-8 - Address BZ 506885 BZ 506236. - Remove rt-3.4.1-I18N.diff. - Fri Apr 24 2009 Ralf Corsepius - 3.8.2-7 - README.fedora.in: Add --dba root to rt-setup-database BZ 488621. - R: perlXML::RSS BZ 496720. Note that Tenable Network Security has extracted the...

phpMyAdmin setup.php脚本PHP代码注入漏洞

BUGTRAQ ID: 34236 CVECAN ID: CVE-2009-1151 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin的Setup脚本用于生成配置。如果远程攻击者向该脚本提交了特制的POST请求的话，就可能在生成的config.inc.php 配置文件中包含任意PHP代码。由于配置文件被保存到了服务器上，未经认证的远程攻击者可以利用这个漏洞执行任意PHP代码。 phpMyAdmin phpMyAdmin 3.x phpMyAdmin phpMyAdmin 2.11.x 厂商补丁： phpMyAdmin ----------...