1105 matches found
CVE-2008-1937
The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...
CVE-2008-1937
The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...
Code injection
The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...
CVE-2008-1937
CVE-2008-1937 affects MoinMoin: the userform.py processing in versions prior to 1.6.3 fails to properly manage users when ACLs or a non-empty superuser list are used, enabling remote privilege escalation. The issue is tied to the user management logic in the form handling code, not a general prod...
CVE-2008-1937
Removed by vendor...
CVE-2008-1937
The user form processing userform.py in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges...
Fedora 7 : rsync-2.6.9-6.fc7 (2008-3060)
Tue Apr 8 2008 Simo Sorce 2.6.9-6.fc7 - Security release: http://rsync.samba.org/security.htmls302 - Wed Sep 5 2007 Simo Sorce 2.6.9-3.fc7 - Add patch to fix crash bug with hardlinks and ACLs patches Note that Tenable Network Security has extracted the preceding description block directly from...
Ubuntu 7.04 / 7.10 : rsync vulnerability (USN-600-1)
Sebastian Krahmer discovered that rsync could overflow when handling ACLs. An attacker could construct a malicious set of files that when processed by rsync could lead to arbitrary code execution or a crash. Note that Tenable Network Security has extracted the preceding description block directly...
GLSA-200803-27 : MoinMoin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-27 MoinMoin: Multiple vulnerabilities Multiple vulnerabilities have been discovered: A vulnerability exists in the file wikimacro.py because the macroGetval function does not properly enforce ACLs CVE-2008-1099. A directory...
CVE-2008-1099
macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...
Code injection
macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...
CVE-2008-1099
CVE-2008-1099 affects MoinMoin
[CSNC] OKI C5510MFP Printer Password Disclosure
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OKI C5510MFP Printer Vendor: OKI Printing Solutions http://www.okiprintingsolutions.com/ Subject: Printer Reveals Password / Password and the configuration can be altered without authentication Risk: High Effect: Remotely exploitable Author:...
Debian Security Advisory DSA 721-1 (squid)
The remote host is missing an update to squid announced via advisory DSA 721-1. OpenVAS Vulnerability Test $Id: deb7211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 721-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-721-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-558-1: Linux kernel vulnerabilities
The minix filesystem did not properly validate certain filesystem values. If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service. CVE-2006-6058 Certain calculatio...
Fedora 8 : squid-2.6.STABLE17-1.fc8 (2007-4170)
Thu Dec 6 2007 Martin Nagy - 2.6.STABLE17-1 - upgrade to latest upstream 2.6.STABLE17 - Mon Nov 12 2007 Martin Bacovsky - 7:2.6.STABLE16-3 - squid is compiled wirh arp acls support --enable-arp-acl Note that Tenable Network Security has extracted the preceding description block directly from the...
Mandrake Linux Security Advisory : bind (MDKSA-2007:149)
The DNS query id generation code in BIND9 is vulnerable to cryptographic analysis which provides a 1-in-8 change of guessing the next query ID for 50% of the query IDs, which could be used by a remote attacker to perform cache poisoning by an attacker CVE-2007-2926. As well, in BIND9 9.4.x, the...