News Evolution 1.02.0 - Include Undefined Variable Command Execution

News Evolution 1.02.0 - Include Undefined Variable Command Execution source: https://www.securityfocus.com/bid/6260/info News Evolution is a freely available, open source news software package. It is written in PHP, and designed for use on Unix and Linux operating systems. The problem occurs in t...

News Evolution 1.0/2.0 - Include Undefined Variable Command Execution

source: https://www.securityfocus.com/bid/6260/info News Evolution is a freely available, open source news software package. It is written in PHP, and designed for use on Unix and Linux operating systems. The problem occurs in the affnews.php file. By loading this file, and defining the chemin...

CVE-2001-1390: Undefined Security Weakness

Unknown vulnerability in binfmtmisc in the Linux kernel before 2.2.19, related to user pages...

CVE-2001-1395: Undefined Security Weakness

Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact...

CVE-2001-1396: Undefined Security Weakness

Unknown vulnerabilities in strnlenuser for Linux kernel before 2.2.19, with unknown impact...

CVE-2002-1041: Undefined Security Weakness

Unknown vulnerability in DCE 1 SMIT panels and 2 configuration commands, possibly related to relative pathnames...

CVE-2002-0176: Undefined Security Weakness

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe...

CVE-2001-1360: Undefined Security Weakness

Vulnerability in Scanner Access Now Easy SANE before 1.0.5, related to pnm and saned...

CVE-2001-1364: Undefined Security Weakness

Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified...

CVE-2001-1361: Undefined Security Weakness

Vulnerability in The Web Information Gateway TWIG 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links...

CVE-1999-1213: Undefined Security Weakness

Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service...

CVE-2001-0431: Undefined Security Weakness

Vulnerability in iPlanet Web Server Enterprise Edition 4.x...

CVE-2000-0348: Undefined Security Weakness

A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges...

CVE-2000-0528: Undefined Security Weakness

Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...

Real Networks Real Server 7.07.0.18.0 Beta - view-source Denial of Service

Real Networks Real Server 7.07.0.18.0 Beta - view-source Denial of Service source: https://www.securityfocus.com/bid/1288/info RealServer 7.0 will crash if it receives a request for a specific file with an unspecified variable value. http://targetIP:port/viewsource/template.html?...

CVE-2000-0364: Undefined Security Weakness

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...

CVE-1999-0895: Undefined Security Weakness

Firewall-1 does not properly restrict access to LDAP attributes...

CVE-1999-0189: Undefined Security Weakness

Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111...

CVE-1999-0600: Undefined Security Weakness

A network intrusion detection system IDS does not verify the checksum on a packet...

CVE-1999-0653: Undefined Security Weakness

A component service related to NIS+ is running...