6781 matches found
PHP < 4.1.0 Safe Mode Mail Function Command Execution
Binary data 1483.prm...
RHEL 2.1 : mysql (RHSA-2003:094)
Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...
RHEL 2.1 : php (RHSA-2002:214)
PHP versions up to and including 4.2.2 contain vulnerabilities in the mail function, allowing local script authors to bypass safe mode restrictions and possibly allowing remote attackers to insert arbitrary mail headers or content. Updated 13 Jan 2003 Added fixed packages for the Itanium IA64...
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...
BBCode XSS in XOOPS CMS
Informations : °°°°°°°°°°°°° Language : PHP Bugged Versions : 1.3.x and less + 2.0.x and less ? not checked Safe Version : 2.0.3 Website : http://www.xoops.org Problem : BBcode XSS PHP Code/Location : °°°°°°°°°°°°°°°°°°° This hole can be used in modules : - Private Messages - News - NewBB forum...
Password Safe information leak
Cleartext password could be found in memory...
leak of information in counterpane/Bruce Schneier's (now open source) Password Safe program
Program description: --- Password Safe is a tool that allows you to have a different password for all the different programs and websites that you deal with, without actually having to remember all those usernames and passwords. Originally created by Bruce Schneier's Counterpane Labs, Password Sa...
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
According to its banner, the version of PHP 4.3.x installed on the remote host is prior to 4.3.2. It is, therefore, potentially affected by an information disclosure vulnerability. Due to a flaw in the function phpsafemodeincludedir, a local attacker could bypass safe mode and gain unauthorized...
PHP 4.3.x - Undefined Safe_Mode_Include_Dir Safemode Bypass
PHP 4.3.x - Undefined SafeModeIncludeDir Safemode Bypass source: https://www.securityfocus.com/bid/8201/info PHP is prone to an issue that may allow programs to bypass Safe Mode by calling external files in restricted directories using include and require. The problem is known to occur when the...
PHP 4.3.x - Undefined Safe_Mode_Include_Dir Safemode Bypass
source: https://www.securityfocus.com/bid/8201/info PHP is prone to an issue that may allow programs to bypass Safe Mode by calling external files in restricted directories using include and require. The problem is known to occur when the safemodeincludedir PHP directive is not defined. A logic...
Important: Red Hat Security Advisory: : Updated MySQL packages fix vulnerabilities
Updated MySQL server packages fix both a double-free security vulnerability and a root exploit security vulnerability. Updated 1 May 2003 Added updated packages for Red Hat Linux 9, which is vulnerable to CAN-2003-0150. MySQL is a multi-user, multi-threaded SQL database server. A double-free...
Important: Red Hat Security Advisory: mysql security update
Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...
CVE-2002-0727: Undefined Security Weakness
The Host function in Microsoft Office Web Components OWC 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method...
[SECURITY] [DSA 208-1] New Perl packages correct Safe handling
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 208-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2002 http://www.debian.org/security/faq -...
persl safe.pm protection bypass
Safe mode doesn't work if it was already used...
[SECURITY] [DSA 208-1] New Perl packages correct Safe handling
-------------------------------------------------------------------------- Debian Security Advisory DSA 208-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2002 http://www.debian.org/security/faq -...
DSA-208 perl - broken safe compartment
Bulletin has no description...
CVE-2002-1323
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in 1 Safe::reval or 2 Safe::rdo using a redefined @ variable, which is not reset between successive calls...
DEBIAN-CVE-2002-1323
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in 1 Safe::reval or 2 Safe::rdo using a redefined @ variable, which is not reset between successive calls...