CGIScript.net csNews 1.0 - Header File Type Restriction Bypass

source: https://www.securityfocus.com/bid/4994/info csNews is a script for managing news items on a website. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible for a malicious admin user to bypass file type restrictions on the header and...

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from...

Drummond Miles A1Stats 1.0 - 'a1disp2.cgi' Traversal Arbitrary File Read

source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An attacker can compose a long path...

Security Advisory FreeBSD-SA-01:30.ufs-ext2fs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:30 Security Advisory FreeBSD, Inc. Topic: UFS/EXT2FS allows disclosure of deleted data Category: kernel Module: ufs/ext2fs Announced: 2001-03-22 Credits: Sven Berkvens...

PT-2013-6332 · Suse +2 · Opensuse +3

Name of the Vulnerable Software and Affected Versions: openSUSE affected versions not specified Linux kernel versions prior to 3.13.6 Description: The issue is related to multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a breach of confidentiality,...