Debian Security Advisory DSA 592-1 (ez-ipupdate)

The remote host is missing an update to ez-ipupdate announced via advisory DSA 592-1. OpenVAS Vulnerability Test $Id: deb5921.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 592-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2003-1339: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in eZnet.exe, as used in eZ a eZphotoshare, b eZmeeting, c eZnetwork, and d eZshare allows remote attackers to cause a denial of service crash or execute arbitrary code, as demonstrated via 1 a long GET request and 2 a long operation or autologin parameter to...

CVE-2007-4493

eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...

Design/Logic Flaw

eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...

Code injection

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4493

eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4493

CVE-2007-4493 affects eZ Publish prior to 3.8.9 and prior to 3.9.3; it arises from improper permission checks on module views that lack a policy function, with unknown impact and attack vectors, demonstrated by a discount vulnerability in the shop module. Remediation exists in the referenced upgr...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4494

The CVE-2007-4494 entry concerns eZ Publish: the tipafriend function in releases before 3.8.9 and before 3.9.3 does not restrict access for anonymous users, enabling remote spam attacks. The vulnerability is tied to insufficient access control rather than an explicit exploit described in the prov...

CVE-2007-4493

eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...

CVE-2007-4493: Undefined Security Weakness

eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...

CVE-2007-4494: Undefined Security Weakness

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2006-7219

eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft...

CVE-2006-7219

eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft...

CVE-2006-7218

eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...

CVE-2006-7218

eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...

CVE-2005-4850

CVE-2005-4850 affects eZ Publish 3.5–3.7 before 20050608. The issue occurs because submitting data requires both edit and create permissions; this allows remote attackers to edit data submitted by arbitrary anonymous users. The available connected documents confirm the product/version scope and t...

CVE-2005-4856

The CVE affects eZ publish: admin interface vulnerabilities in versions 3.5 up to 3.5.7, 3.6 up to 3.6.5, 3.7 up to 3.7.3, and 3.8 before 20051110. The issue arises from improper handling of authorization errors, allowing remote attackers to obtain sensitive information and view the admin page la...