[Full-Disclosure] MDKSA-2004:129 - Updated ez-ipupdate packages fix format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: ez-ipupdate Advisory ID: MDKSA-2004:129 Date: November 10th, 2004 Affected versions: 10.0, 10.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Ulf Harnhammar discovered ...

[Full-Disclosure] ez-ipupdate format string bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: ez-ipupdate Advisory ID: MDKSA-2004:129 Date: November 10th, 2004 Affected versions: 10.0, 10.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Ulf Harnhammar discovered ...

eZ Multiple Products Connection Saturation Remote DoS

Binary data 2268.prm...

[SA12460] eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability

TITLE: eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12460 VERIFY ADVISORY: http://secunia.com/advisories/12460/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: eZphotoshare 1.x http://secunia.com/product/2592/ eZ 3.x...

eZ Publish site.ini Configuration Disclosure

Binary data 1562.prm...

CVE-2003-0887

ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthorized operations via a symlink attack on the ez-ipupdate.cache file...

EZMeeting 3.x - 'EZNet.exe' Long HTTP Request Remote Buffer Overflow

//source: https://www.securityfocus.com/bid/9167/info // //A problem has been identified in the handling of some types of requests by the eZ package, resulting in a buffer overrun. Because of this, it may be possible for a remote attacker to execute arbitrary code and gain unauthorized access to ...

CVE-2003-0310

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

eZ Publish articleview.php XSS

The remote host is using ezPublish, a content management system. There is a flaw in the remote ezPublish which lets an attacker perform a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0310

CVE-2003-0310 affects the eZ Publish web content system, specifically versions

CVE-2003-0310

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

EzPublish Directory XSS Vulnerability

------------------------------------------------------ EzPublish "Directory" XSS Vulnerability ------------------------------------------------------ ------------------------------------------------------ About Ezpublish; ------------------------------------------------------ PHP Based Content...

CVE-2003-0310: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

EZ Publish 2.2 - 'index.php' IMG Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/7616/info A cross-site scripting vulnerability has been reported for eZ publish. Specifically, eZ publish does not sufficiently sanitize user-supplied input supplied to the 'index.php' script. This may allow for theft of cookie-based authentication...

EZ Publish 2.2 - index.php IMG Tag Cross-Site Scripting

EZ Publish 2.2 - index.php IMG Tag Cross-Site Scripting source: https://www.securityfocus.com/bid/7616/info A cross-site scripting vulnerability has been reported for eZ publish. Specifically, eZ publish does not sufficiently sanitize user-supplied input supplied to the 'index.php' script. This m...

[SCSA-017] Directory Traversal Vulnerability in EZ Server

====================================================================== Security Corporation Security Advisory SCSA-017 Directory Traversal Vulnerability in EZ Server ====================================================================== PROGRAM: EZ Server HOMEPAGE: http://www.html-helper.com...

EZ Server 1.0 - File Disclosure

EZ Server 1.0 - File Disclosure source: https://www.securityfocus.com/bid/7378/info It has been announced that EZ Server is vulnerable to a condition that may result in the disclosure of potentially sensitive information through requests that have directory traversal sequences...

EZ Server 1.0 - File Disclosure

source: https://www.securityfocus.com/bid/7378/info It has been announced that EZ Server is vulnerable to a condition that may result in the disclosure of potentially sensitive information through requests that have directory traversal sequences. http://target/../../winnt/win.ini...

EZ Publish 2.2.73.0 - Multiple Cross-Site Scripting Vulnerabilities

EZ Publish 2.2.73.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/7348/info Several cross site scripting vulnerabilities have been reported for eZ Publish. These vulnerabilities are due to insufficient sanitization of user-supplied data submitted to eZ...

EZ Publish 2.2.73.0 - Multiple Full Path Disclosure Vulnerabilities

EZ Publish 2.2.73.0 - Multiple Full Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/7349/info Several path disclosure vulnerabilities have been reported for eZ Publish. An attacker can exploit this vulnerability by making a HTTP request for any of the affected pages. Thi...