DEBIAN-CVE-2008-5188

The 1 ecryptfs-setup-private, 2 ecryptfs-setup-confidential, and 3 ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process...

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial/a...

kvirc-exec.txt

Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial...

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution

Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial a href='ircs6:///"%20--nosplash%20-e%20"run%20c...

Fwd: Deny Of Service and infinite loop in BitDefender (module pdf.xmd)

Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publication Deny of service occurs during parsing of included compressed...

[SECURITY] Fedora 8 Update: clamav-0.92.1-4.fc8

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 9 Update: clamav-0.93.3-2.fc9

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

smcFanControl for Mac OS X buffer overflow

Stack buffer overflow on -k command line option parsing...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

Stack overflow

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

[SECURITY] Fedora 9 Update: cups-1.3.9-1.fc9

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

MySQL命令行客户端HTML特殊字符HTML注入漏洞

BUGTRAQ ID:31486br / CNCAN ID：CNCAN-2008100103br / br / MySQL是一款开放源代码的数据库服务程序。br / MySQL命令行客户端没有对其输出进行过滤处理，远程攻击者可以利用漏洞获得敏感信息。br / MySQL命令行客户端在它的输出中对HTML特定字符如""缺少引用处理，允许攻击者写数据到表中来隐藏或修改输出的记录，并注入恶意代码，如通过Javascript执行跨站脚本或跨站请求伪造攻击。 MySQL AB MySQL 5.1.26 MySQL AB MySQL 5.1.23 MySQL AB MySQL 5.1.22 MySQ...

CVE-2008-4456

Cross-site scripting XSS vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be...

CVE-2008-4456

CVE-2008-4456 is a MySQL command-line client XSS flaw. Affects MySQL 5.0.26–5.0.45 (and related 5.0.x versions with --html) where HTML output could include injected scripts if data in a database cell is crafted. Public documents indicate the issue existed as of 2008-10-31 and was addressed by bac...

CVE-2008-4456

Cross-site scripting XSS vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be...

MySQL 5 - Command Line Client HTML Special Characters HTML Injection

MySQL 5 - Command Line Client HTML Special Characters HTML Injection source: https://www.securityfocus.com/bid/31486/info MySQL is prone to an HTML-injection vulnerability because the application's command-line client fails to properly sanitize user-supplied input before using it in dynamically...

MySQL 5 - Command Line Client HTML Special Characters HTML Injection

source: https://www.securityfocus.com/bid/31486/info MySQL is prone to an HTML-injection vulnerability because the application's command-line client fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in...

Gentoo Security Advisory GLSA 200412-01 (scponly)

The remote host is missing updates announced in advisory GLSA 200412-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : opensc, opensc-devel (ZYPP Patch Number 5588)

This update fixes a security issues with opensc that occured when initializing blank smart cards with Siemens CardOS M4. After the initialization anyone could set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: Already initialized cards are still vulnerable after this update...