904 matches found
[SECURITY] [DLA 1056-1] cvs security update
Package : cvs Version : 2:1.12.13+real-9+deb7u1 CVE ID : CVE-2017-12836 Debian Bug : 871810 It was discovered that there was a command injection vulnerability in the CVS revision control system. For Debian 7 "Wheezy", this issue has been fixed in cvs version 2:1.12.13+real-9+deb7u1. We recommend...
[SECURITY] [DSA 3940-1] cvs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3940-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 13, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3940-1] cvs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3940-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 13, 2017 https://www.debian.org/security/faq -...
DSA-3940-1 cvs - security update
Bulletin has no description...
DLA-1056-1 cvs - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3940-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-12836
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."...
cvs -- Remote code execution via ssh command injection
Hank Leininger reports: Bugs in Git, Subversion, and Mercurial were just announced and patched which allowed arbitrary local command execution if a malicious name was used for the remote server, such as starting with - to pass options to the ssh client: git clone...
AIX NTP v3 Advisory : ntp_advisory7.asc (IV87614) (IV87419) (IV87615) (IV87420) (IV87939)
The version of NTP installed on the remote AIX host is affected by the following vulnerabilities : - A time serving flaw exists in the trusted key system due to improper key checks. An authenticated, remote attacker can exploit this to perform impersonation attacks between authenticated peers...
[SECURITY] Fedora 26 Update: subversion-1.9.6-2.fc26
Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...
classiccollectionsgiftshop.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-230195 Description| Value ---|--- Affected Website:| classiccollectionsgiftshop.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....
WS-2017-3798
In weblate in versions weblate-2.5 to weblate-2.13.1 is vulnerable to CSV Injection with the CVS export feature in weblate/trans/exporters.py...
CVS/SVN User Disclosure
Concurrent Version System CVS and Subversion SVN provide a method for application developers to control different versions of their code. Occasionally, the developer's version or user information can be stored incorrectly within the code and may be visible to the end user either in the HTML or co...
Debian DLA-820-1 : viewvc security update
Thomas Gerbet discovered that viewvc, a web interface for CVS and Subversion repositories, did not properly sanitize user input. This issue resulted in a potential Cross-Site Scripting vulnerability. For Debian 7 'Wheezy', these problems have been fixed in version 1.1.5-1.4+deb7u1. We recommend...
[SECURITY] Fedora 25 Update: viewvc-1.1.26-1.fc25
ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...
OpenBSD 6.0 httpd Content-Length DoS Exploit
Exploit for openbsd platform in category dos / poc Log message: Reimplement httpd's support for byte ranges. The previous implementation loaded all the output into a single output buffer and used its size to determine the Content-Length of the body. The new implementation calculates the body leng...
GLSA-201701-44 : CVS: Heap-based overflow
The remote host is affected by the vulnerability described in GLSA-201701-44 CVS: Heap-based overflow A heap-based buffer overflow was discovered in the proxyconnect function in src/client.c in CVS. Impact : An attacker, utilizing a remote HTTP proxy server, could cause a Denial of Service...
CVS: Heap-based overflow
Background CVS Concurrent Versions System is an open-source network-transparent version control system. It contains both a client utility and a server. Description A heap-based buffer overflow was discovered in the proxyconnect function in src/client.c in CVS. Impact An attacker, utilizing a remo...
Vulnerabilities in OpenSSL affect AIX
IBM SECURITY ADVISORY First Issued: Mon Nov 14 13:29:26 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory21.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory21.asc...
