1272 matches found
Code injection
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...
CVE-2008-1381
ZoneMinder prior to 1.23.3 is affected. The CVE-2008-1381 vulnerability allows remote command execution through shell metacharacters in a crafted URL, accessible to remote authenticated users (and possibly unauthenticated in some setups). The Fedora/OpenVAS entries confirm a patched update to zon...
CVE-2008-1381
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...
CVE-2008-1381
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...
CVE-2004-0227
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string...
DEBIAN-CVE-2004-0227
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string...
CVE-2004-0227
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string...
[UNIX] ZoneMinder Query String Buffer Overflow Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
ZoneMinder buffer overflow
No description provided...
CVE-2004-0227
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string...
CVE-2004-0227
CVE-2004-0227 : In ZoneMinder, the zms script is vulnerable before version 1.19.2 due to a buffer overflow triggered by a long query string. This allows a remote attacker to potentially execute arbitrary code. The connected sources confirm the same description across CVE/NVD OSV and Debian tracki...