ewire Payment Client 1.601.70 - Command Execution

ewire Payment Client 1.601.70 - Command Execution source: https://www.securityfocus.com/bid/25683/info ewire Payment Client is prone to a vulnerability that allows attackers to execute arbitrary shell commands because the software fails to sanitize user-supplied input. An attacker may leverage th...

Design/Logic Flaw

The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands. NOTE: this is only a vulnerability in environments in which the administrator has not followed documentation that outlines the...

CVE-2007-4749

CVE-2007-4749 affects Autodesk Backburner 3.0.2 where the cmdjob utility allows remote users to queue jobs that execute arbitrary commands on render servers. The Backburner Manager listens by default on TCP port 3234, and the vulnerability arises from command input not being properly restricted, ...

Mailmarshal mail gateway directory traversal

Vulnerable outdated ported version of 'tar' utility is used, making it's possible to overwrite system files via directory traversal vulnerability...

Numerous XSS Type 2 vulnerabilities in macros bundled with Confluence

'd like to report critical vulnerabilities in 3 of your macros - Column, Image, Block and Code macros. The vulnerabilities are classified as XSS Type 2 stored and the details with example exploits are in the pdfs attached. Because of similarity of the vulnerabilities assume that it is more than...

[SECURITY] Fedora 7 Update: kdegraphics-3.5.7-2.fc7

Graphics applications for the K Desktop Environment, including kamera digital camera support kcoloredit palette editor and color chooser kdvi displays TeX .dvi files kghostview displays postscript files kiconedit icon editor kooka scanner application kpdf displays PDF files kruler screen ruler an...

Low: Red Hat Bug Fix Advisory: unzip bug fix update

Updated unzip packages that address various bugs are now available. The unzip utility is used to list, test, or extract files from a zip archive. This update addresses the following issues: a TOCTOU bug that could be exploited to change file permissions CVE-2005-2475 a long filename buffer overfl...

[SECURITY] Fedora 7 Update: file-4.21-1.fc7

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...

[SECURITY] Fedora Core 5 Update: file-4.21-1.fc5

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...

Buffer overflow

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

CVE-2007-3124

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

CVE-2007-3124

CVE-2007-3124: Affected software is FreeVMS (backup utility), vulnerable through the backup/src/vmsbackup.c buffer overflow prior to 0.3.6. A local user could exploit a long string in response to an "extract [ny]" prompt to gain privileges. Documented impact is local privilege escalation with par...

CVE-2007-3124

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

file security update

CentOS Errata and Security Advisory CESA-2007:0391 An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a...

Moderate: Red Hat Security Advisory: file security update

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

SOL4369 - Configuration utility login vulnerability - CR45786

BIG-IP 9.0.2 through 9.0.4 cache login credentials for the Configuration utility. Once a user is logged in, the cache does not check the password entered for additional sessions under that user name. As a result, it is possible to gain access to the BIG-IP Configuration utility without a password...

Design/Logic Flaw

Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin NSL 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their own attributes."...

CVE-2007-2475

Affected product: Novell SecureLogin (NSL) 6 SP1 prior to 6.0.106, specifically the ADSCHEMA utility. Issue: A vulnerability that permits a user to gain excessive permissions to their own attributes in an Active Directory (AD) environment. Impact/notes: The vulnerability is described in the conne...

'file' utility regular expressions DoS

Large number of LF characters leads to CPU consumption...

[SECURITY] Fedora Core 6 Update: file-4.19-2.fc6

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...