AtHocGov IWSAlerts ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in AtHocGov IWSAlerts. When sending an overly long string to the CompleteInstallation method of AtHocGovTBr.dll 6.1.4.36 an attacker may be able to execute arbitrary code. This vulnerability was silently patched by the vendor. This module requires...

Mandriva Update for wml MDVSA-2008:076 (wml)

Check for the Version of wml OpenVAS Vulnerability Test Mandriva Update for wml MDVSA-2008:076 wml Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Gentoo Security Advisory GLSA 200803-23 (wml)

The remote host is missing updates announced in advisory GLSA 200803-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-23 (wml)

The remote host is missing updates announced in advisory GLSA 200803-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1492-2] New wml packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1492-2 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1492-1] New wml packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1492-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

CVE-2008-0666

Website META Language WML 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on 1 the /tmp/pe.tmp.$$ temporary file used by wmlcontrib/wmg.cgi and 2 temporary files used by wmlbackend/p3eperl/eperlsys.c...

CVE-2008-0666

CVE-2008-0666 affects Website META Language (WML) 2.0.11. Local attackers can exploit insecure temporary files created by wml_contrib/wmg.cgi, wml_backend/p3_eperl/eperl_sys.c, and ipp-related paths (e.g., /tmp/pe.tmp.$$) via symlinks to overwrite or modify files. Impact is local. The vulnerabili...

[SECURITY] [DSA 1492-1] New wml packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1492-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...