2053 matches found
Debian Security Advisory DSA 2765-1 (davfs2 - privilege escalation)
Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation. OpenVAS Vulnerability Test $Id: deb2765.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2765-1 using nvtgen 1.0 Script version: 1....
Fedora Update for owncloud FEDORA-2013-13143
Check for the Version of owncloud OpenVAS Vulnerability Test Fedora Update for owncloud FEDORA-2013-13143 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Copy to WebDAV 1.1 iOS - Multiple Vulnerabilities
Copy to WebDAV 1.1 iOS - Multiple Vulnerabilities Title: ====== Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1044 VL-ID: ===== 1044 Common Vulnerability Scoring System:...
Copy To WebDAV 1.1 LFI / Shell Upload / Command Injection
Title: ====== Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1044 VL-ID: ===== 1044 Common Vulnerability Scoring System: ==================================== 8.9 Introduction: =============...
httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav
moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...
Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities
Document Title: =============== Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1044 Release Date: ============= 2013-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 104...
Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities
Document Title: =============== Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1044 Release Date: ============= 2013-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 104...
httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav
moddav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service segmentation fault via a MERGE request in which the URI is configured for handling by the moddavsvn module, but a certain href...
[Netsparker v3.0.2.0 Community Edition] Web Application Security Scanner
Netsparker can crawl, attack and identify vulnerabilities in all custom web applications regardless of the platform and the technology they are built on, just like an actual attacker. It can identify web application vulnerabilities like SQL Injection, Cross-site Scripting XSS, Remote Code Executi...
[SECURITY] Fedora 19 Update: owncloud-4.5.12-1.fc19
ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...
[SECURITY] Fedora 18 Update: owncloud-4.5.12-1.fc18
ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...
Java - Web Start Double Quote Injection Remote Code Execution (Metasploit)
======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 and 1.7.03 to 1.7.07 Tested on:...
dav
This plugin finds WebDAV configuration errors. These errors are generally server configuration errors rather than a web application errors. To check for vulnerabilities of this kind, the plugin will try to PUT a file on a directory that has WebDAV enabled, if the file is uploaded successfully, th...
Sun Java Web Start Double Quote Injection Vulnerability
This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. Parameters intial-heap-size and max-heap-size in a JNLP file can contain a double quote which is not properly sanitized when creating the command line for javaw.exe. This allows the injection of...
Sun Java Web Start Double Quote Injection
======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 and 1.7.03 to 1.7.07 Tested on:...
Fedora Update for php-sabredav-Sabre_DAV FEDORA-2013-7289
Check for the Version of php-sabredav-SabreDAV OpenVAS Vulnerability Test Fedora Update for php-sabredav-SabreDAV FEDORA-2013-7289 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Fedora Update for owncloud FEDORA-2013-6417
Check for the Version of owncloud OpenVAS Vulnerability Test Fedora Update for owncloud FEDORA-2013-6417 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for php-sabredav-Sabre_DAV FEDORA-2013-7285
Check for the Version of php-sabredav-SabreDAV OpenVAS Vulnerability Test Fedora Update for php-sabredav-SabreDAV FEDORA-2013-7285 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...