CVE-2011-1008

The CVE-2011-1008 entry concerns Best Practical Solutions’ Request Tracker (RT) prior to 3.8.9. A vulnerability in Scrips_Overlay.pm allows remote authenticated users to access sensitive information from a TicketObj after a CurrentUser change, with evidence of exposure via custom-field data tied ...

CVE-2011-1020

The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lsee...

CVE-2011-0449

actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action...

CVE-2011-0449

The CVE-2011-0449 vulnerability affects Ruby on Rails 3.0.x (before 3.0.4). It arises in actionpack’s template resolver logic on case-insensitive filesystems, where filters for the list of available templates are not properly enforced, allowing an attacker to bypass access restrictions by using a...

PT-2011-2352

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.0.x through 3.0.3 Description The issue allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters, when a case-insensitive filesystem is...

RHEL 6 : subversion (RHSA-2011:0258)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0258 advisory. - Subversion: Access restriction bypass by checkout of the root of the repository CVE-2010-3315 - Subversion moddavsvn: DoS crash by...

CVE-2011-1032

IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors...

PT-2011-2823

Name of the Vulnerable Software and Affected Versions IBM Lotus Connections version 3.0 Description The issue is related to improper access restriction to the internal login module, which may have unspecified impact and attack vectors. Recommendations For IBM Lotus Connections version 3.0, consid...

Apache Tomcat 6.0.x < 6.0.30 Multiple Vulnerabilities

According to its self-reported version number, the instance of Apache Tomcat 6.0.x listening on the remote host is prior to 6.0.30. It is, therefore, affected by multiple vulnerabilities : - An error in the access restriction on a 'ServletContext' attribute that holds the location of the work...

Apache Tomcat 7.0.x < 7.0.4 SecurityManager Local Security Bypass

Binary data 5792.pasl...

Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities

Binary data 5786.pasl...

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12672)

This patch updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security issues were fixed : - The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel did not verify whether the tty has a write...

Access Restriction Bypass

Overview Affected versions of this package are vulnerable to Access Restriction Bypass. The keycertify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow...

PT-2011-1315

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.0.0 beta 4 Description The issue allows attackers to bypass intended access restrictions via standard filesystem operations because it does not consider the umask value when setting the permissions of files...

CVE-2009-5054: Undefined Security Weakness

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations...

CVE-2011-0752: Improper Input Validation

The extract function in PHP before 5.2.15 does not prevent use of the EXTROVERWRITE parameter to overwrite 1 the GLOBALS superglobal array and 2 the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended t...

CVE-2011-0348: Undefined Security Weakness

Cisco IOS 12.411MD, 12.415MD, 12.422MD, 12.424MD before 12.424MD3, 12.422MDA before 12.422MDA5, and 12.424MDA before 12.424MDA3 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to bypass intended access restrictions and intended billing restrictions by...

SuSE 10 Security Update : ruby (ZYPP Patch Number 6338)

This ruby update improves return value checks for openssl function OCSPbasicverify CVE-2009-0642 which allowed an attacker to use revoked certificates. The entropy of DNS identifiers was increased CVE-2008-3905 to avaid spoofing attacks. The code for parsing XML data was vulnerable to a denial of...

CollabNet ScrumWorks Basic Server transmits credential information in plaintext

Overview Communication between the Collabnet ScrumWorks Basic Server and CollabNet ScrumWorks Desktop Client transmits credential information in plaintext. Description The communication between the CollabNet ScrumWorks Basic Server and CollabNet ScrumWorks Desktop Client is transmitting credentia...

PT-2011-1233

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.4 Description The issue allows context-dependent attackers to bypass intended access restrictions. This can be achieved by placing a safe file extension after the 0 character in a pathname. For example, using .php0.jp...