Design/Logic Flaw

Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to 1 includes/index.php, 2 tests/adddurationtest.php, 3 tests/alltests.php, 4 groups.php, 5 nonusers.php, 6 includes/settings.php, 7 includes/init.php, 8 includes/settings.php.orig, 9...

Full path disclosure in Webcalendar 1.1.0-CVS

Full path disclosure in webcalendar Author : Rusydi Hasan M a.k.a : cR45H3R Location : Indonesia, Cilacap Date : March,28th 2006 Version : 1.1.0-CVS --- software description WebCalendar is a PHP application used to maintain a calendar for one or more persons and for a variety of purposes. ---...

NetBSD Security Advisory 2006-002: settimeofday() time wrap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2006-002 ================================= Topic: settimeofday time wrap Version: NetBSD-current: source prior to December 5, 2005 NetBSD 3.0: not affected NetBSD 2.1: affected NetBSD 2.0.3: affected NetBSD 1.6.2: affected...

CVE-2005-4454

Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting XSS attacks via a "" backslash within a "javascript" scheme in a style property such as "javas\cript", whic...

CVS malformed entry lines flaw

The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system because of a flaw relating to malformed Entry lines which lead to a missing NULL terminator. Among the issues deemed likely to be exploitable were: - a double-free...

CVS/Entries

Your website allows read access to the CVS/Entries file. This exposes all file names in your CVS module on your website. Change your website permissions to deny access to your CVS directory. OpenVAS Vulnerability Test $Id: cvsinwww.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: CVS/Entries...

Chora Detection

This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...

A CVS pserver is running

A CVS Concurrent Versions System server is installed, and it is configured to have its own password file, or use that of the system. This service starts as a daemon, listening on port TCP:port. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced...

CVS file existence information disclosure weakness

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVSTrac history.c history_update function overflow

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. OpenVAS has...

A CVS pserver is running

A CVS Concurrent Versions System server is installed, and it is configured to have its own password file, or use that of the system. This service starts as a daemon, listening on port TCP:port. Knowing that a CVS server is present on the system gives attackers additional information about the...

CVS file existence information disclosure weakness

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behaviour can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. OpenVAS Vulnerability...

Multiple NetBSD vulnerabilities

Integer overflow in FreeBSD compatibility subsystem, imake symbolic links problem, ptrace privilege escalation. Known vulnerabilities in CVS, telnet, OpenSSL, ntpd are patched...

PHP 5.0.5 - Safedir Restriction Bypass

source: https://www.securityfocus.com/bid/15119/info PHP is prone to multiple vulnerabilities that permit an attacker to bypass the 'safedir' directory restriction. An attacker can exploit these vulnerabilities to possible execute arbitrary code currently existing on a vulnerable system, or to...

Fedora Core 3 : cvs-1.11.17-7.FC3 (2005-791)

Tue Aug 23 2005 Martin Stransky 1.11.17-7.FC3 - fix for 166366 - CVS temporary file issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Core 4 : cvs-1.11.19-9 (2005-790)

Tue Aug 23 2005 Martin Stransky 1.11.19-9 - fix for 166366 - CVS temporary file issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Debian DSA-802-1 : cvs - insecure temporary files

Marcus Meissner discovered that the cvsbug program from CVS, which serves the popular Concurrent Versions System, uses temporary files in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Fedora Core 3 : cvs-1.11.17-6.FC3 (2005-330)

Mon Apr 18 2005 Martin Stransky 1.11.17-6.FC3 - add security fix CVE-2005-0753 Derek Price Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] [DSA 806-1] New cvs packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 806-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 806-1] New cvs packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 806-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2005 http://www.debian.org/security/faq -...