Directory traversal

Directory traversal vulnerability in the Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. dot dot in a request...

CVE-2008-7109

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password...

Design/Logic Flaw

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

CVE-2008-7112

CVE-2008-7112 affects Kyocera Mita KM Scanner File Utility (aka listener) 3.3.0.1. The vulnerability arises from handling invalid field length values in a malformed document or request, allowing remote attackers to cause a denial of service (hang or crash). The description specifies remote exploi...

CVE-2008-7110

CVE-2008-7110 affects Kyocera Mita KM 3.3.0.1: the Scanner File Utility (aka listener) vulnerable to directory traversal via .. in a request, enabling remote upload of files to arbitrary locations. Related entries (CVE-2008-7111) indicate the tool does not restrict uploaded filenames or extension...

CVE-2008-7111

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109...

CVE-2008-7113

The CVE-2008-7113 entry describes a vulnerability in Kyocera Mita KM Scanner File Utility (aka listener) version 3.3.0.1 where a small, predictable space of user IDs used for access control enables remote attackers to upload documents via a brute-force approach. The affected component is the Scan...

CVE-2008-7112

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

CVE-2008-7111

The Scanner File Utility (aka listener) in Kyocera Mita KM 3.3.0.1 is vulnerable to directory traversal via a .. sequence in requests, allowing remote attackers to upload files to arbitrary locations. CVE-2008-7110 (and related CVEs) describe this behavior enabling arbitrary file write by crafted...

CVE-2008-7109

The CVE-2008-7109 entry affects Kyocera Mita KM 3.3.0.1: the Scanner File Utility (the listener) allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt for a password. This constitutes a remote, unauthenticated f...

CVE-2008-7109

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password...

PT-2009-2578 · Kyocera · Kyocera Mita

Name of the Vulnerable Software and Affected Versions: Kyocera Mita KM version 3.3.0.1 Description: The issue allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password. This is related to the...

CVE-2008-7053

The vulnerability CVE-2008-7053 affects LogMeIn Remote Access Utility ActiveX control RACtrl.dll. The issue arises when fgcolor and bgcolor properties are set to certain long values, triggering memory corruption and leading to a denial of service (crash). No specific affected versions, patch deta...

Mandrake Security Advisory MDVSA-2009:162 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:162. OpenVAS Vulnerability Test $Id: mdksa2009162.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:162 java-1.6.0-openjdk Authors: Thomas Reinke Copyright:...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1161)

The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. CVE-2009-2670: The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted apple...

[SECURITY] Fedora 11 Update: apr-util-1.3.9-1.fc11

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

CVE-2009-2412

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

DEBIAN-CVE-2009-2412

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

Oracle Secure Backup login.php ora_osb_lcookie command execution

Added: 06/22/2009 CVE: CVE-2008-4006 BID: 33177 OSVDB: 51343 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command execution vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...