DEBIAN-CVE-2002-1154

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...

CVE-2002-1154

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...

CVE-2002-0166

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display...

CVE-2002-0166

CVE-2002-0166 covers a cross-site scripting vulnerability in analog prior to 5.22 where an HTTP request containing script text is logged and not properly sanitized during display, enabling a remote attacker to execute JavaScript. Affected: analog (pre-5.22). Root cause: insufficient filtering of ...

[SECURITY] [DSA 125-1] New analog packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 125-1 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2002 - -------------------------------------------------------------------------- Package : analog...

[SECURITY] [DSA 125-1] New analog packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 125-1 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2002 - -------------------------------------------------------------------------- Package : analog...

CVE-1999-1287

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface...

CVE-1999-1287

Technical details about CVE-1999-1287 are not publicly available in the provided connected documents. The initial description is known, but no explicit affected products, versions, or exploit information are supplied here. Monitor for updates.

CVE-2001-0301

Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings...

CVE-2001-0301

Vulnerability CVE-2001-0301 affects Analog prior to version 4.16. A remote attacker can exploit via the ALIAS command to construct long strings and execute arbitrary commands. Impact is remote code execution with complete confidentiality/integrity/availability. Remediation: upgrade Analog to 4.16...

CVE-2001-0301

Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings...

[SECURITY] [DSA 033-1] New versions of analog available

---------------------------------------------------------------------------- Debian Security Advisory DSA-033-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : analog...

Security advisory for analog

SECURITY ADVISORY 13th February 2001 ---------------------------------------------------------------------- Program: analog logfile analysis program Versions: all versions except 4.16 and 4.90beta3 Operating systems: all ---------------------------------------------------------------------- There...

CVE-1999-1287

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface...