CVE-2008-5768

The CVE-2008-5768 entry is an actionable SQL injection in the AM Events module (Amevents) for XOOPS version 0.22, exploitable through print.php via the id parameter. The underlying issue is a direct SQL command construction vulnerability that allows remote attackers to execute arbitrary SQL comma...

CVE-2008-5768

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5768: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

hostadmin-rfi.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Remote File Include Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?path=Site?...

hostadmin-xss.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scripting Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?page=XSS...

Gentoo Security Advisory GLSA 200804-09 (am-utils)

The remote host is missing updates announced in advisory GLSA 200804-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.euro26.am

Security researcher ByCyber, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.euro26.am, which at the time of submission ranked 7551601 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2009. It is currentl...

CVE-2008-2705

Technical details about CVE-2008-2705 are not publicly available in the provided connected documents. Monitor for updates from official advisories; sources summarize an authentication bypass in Sun Java System Access Manager with DSEE, but specifics are not given.

CVE-2008-2705: Improper Authentication

Unspecified vulnerability in Sun Java System Access Manager AM 7.1, when used with certain versions and configurations of Sun Directory Server Enterprise Edition DSEE, allows remote attackers to bypass authentication via unspecified vectors...

Unfixed XSS vulnerability at www.coasttocoastam.com

Security researcher Azat Harutyunyan, has submitted on 28/05/2008 a cross-site-scripting XSS vulnerability affecting www.coasttocoastam.com, which at the time of submission ranked 7598 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008...

GLSA-200804-09 : am-utils: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200804-09 am-utils: Insecure temporary file creation Tavis Ormandy discovered that, when creating temporary files, the 'expn' utility does not check whether the file already exists. Impact : A local attacker could exploit the...

am-utils symbolic links security vulnerability

expn utility unsafe temporary files creation...

[ GLSA 200804-09 ] am-utils: Insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

am-utils: Insecure temporary file creation

Background am-utils is a collection of utilities for use with the Berkeley Automounter. Description Tavis Ormandy discovered that, when creating temporary files, the 'expn' utility does not check whether the file already exists. Impact A local attacker could exploit the vulnerability via a symlin...

CVE-2008-1078

expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expnPID temporary file. NOTE: this is the same issue as CVE-2003-0308.1...

CVE-2008-1078

expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expnPID temporary file. NOTE: this is the same issue as CVE-2003-0308.1...

CVE-2008-1078

CVE-2008-1078 affects the expn component of am-utils (and related net-fs usage) on Gentoo, rPath Linux, and other distros. The issue is an insecure temporary-file handling in expn that allows a local user to perform a symlink attack on expn[PID], enabling overwriting of arbitrary files. This vuln...

PT-2008-1124 · Gentoo Linux · Am-Utils

Name of the Vulnerable Software and Affected Versions: am-utils versions prior to 6.1.5 Description: The issue affects the am-utils package in Gentoo Linux and potentially other distributions, allowing local users to exploit it and compromise the confidentiality, integrity, and availability of...

rPSA-2008-0088-1 am-utils

rPath Security Advisory: 2008-0088-1 Published: 2008-02-28 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Local Non-deterministic Unauthorized Access Updated Versions: am-utils=conary.rpath.com@rpl:1/6.0.9-11.4-1 rPath Issue Tracking System:...

CVE-2008-1078: Improper Link Resolution Before File Access

expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expnPID temporary file. NOTE: this is the same issue as CVE-2003-0308.1...