195 matches found
EUVD-2012-2329
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...
Low: Red Hat Security Advisory: virt-v2v security and bug fix update
An updated virt-v2v package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
CVE-2011-2569
Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188...
Ubuntu Update for foomatic-filters USN-1194-1
Ubuntu Update for Linux kernel vulnerabilities USN-1194-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11941.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for foomatic-filters USN-1194-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-1194-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : foomatic-filters vulnerabilities (USN-1194-1)
It was discovered that the foomatic-rip Foomatic filter incorrectly handled command-line options. An attacker could use this flaw to cause Foomatic to execute arbitrary code as the 'lp' user. In the default installation, attackers would be isolated by the CUPS AppArmor profile. Note that Tenable...
USN-1194-1: Foomatic filters vulnerabilities
It was discovered that the foomatic-rip Foomatic filter incorrectly handled command-line options. An attacker could use this flaw to cause Foomatic to execute arbitrary code as the "lp" user. In the default installation, attackers would be isolated by the CUPS AppArmor profile...
foomatic security update
3.0.2-38.3:.1 - Applied patch to fix improper sanitization of command line options CVE-2011-2697, bug 721001...
Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)
$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow
Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP OpenView\www\bin\ovwebsnmpsrv.exe -dump...
Multiple Browsers Telnet URI Handler File Manipulation (CVE-2004-0411; CVE-2004-0473)
There exists a vulnerability that affects various web-browsers. Insufficient input validation for telnet URI e.g., telnet://hostname can cause the Telnet software activated by the browsers to treat specially crafted Telnet URI as command-line options. As such, a malicious attacker may be able to...
Gentoo Security Advisory GLSA 200412-01 (scponly)
The remote host is missing updates announced in advisory GLSA 200412-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Debian Security Advisory DSA 168-1 (PHP3, PHP4)
The remote host is missing an update to PHP3, PHP4 announced via advisory DSA 168-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Code execution via QuickTime Media-link files — Mozilla
On his blog Petko D. Petkov reported that QuickTime Media-Link files contain a qtnext attribute that could be used on Windows systems to launch the default browser with arbitrary command-line options. When the default browser is Firefox 2.0.0.6 or earlier use of the -chrome option allowed a remot...
mozilla -- code execution via Quicktime media-link files
The Mozilla Foundation reports a vulnerability within the mozilla browser. This vulnerability also affects various other browsers like firefox and seamonkey. The vulnerability is caused by QuickTime Media-Link files that contain a qtnext attribute. This could allow an attacker to start the browse...
CVE-2006-1079
htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, an...
CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...
GLSA-200410-08 : ncompress: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200410-08 ncompress: Buffer overflow compress and uncompress do not properly check bounds on command line options, including the filename. Large parameters would trigger a buffer overflow. Impact : By supplying a carefully crafted...
Debian DSA-377-1 : wu-ftpd - insecure program execution
wu-ftpd, an FTP server, implements a feature whereby multiple files can be fetched in the form of a dynamically constructed archive file, such as a tar archive. The names of the files to be included are passed as command line arguments to tar, without protection against them being interpreted as...