CVE-2006-1667

Summary: CVE-2006-1667 affects Eric Gerdes Crafty Syntax Image Gallery (CSIG) up to version 3.1g. The vulnerability is a SQL injection in slides.php caused when the variable $projectid is less than 1, which prevents the limitquery_s parameter from being set. This enables remote authenticated user...

CVE-2006-1668: Undefined Security Weakness

newimage.php in Eric Gerdes Crafty Syntax Image Gallery CSIG aka PHP thumbnail Photo Gallery 3.1g and earlier allows remote authenticated users to upload and execute arbitrary PHP code via a multipart/form-data POST with a .jpg filename in the fullimage parameter and the ext parameter set to .php...

CVE-2006-1667: Undefined Security Weakness

SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery CSIG aka PHP thumbnail Photo Gallery 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquerys parameter when the $projectid variable is less than 1, which prevents...

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP Denial of Service // // Cisco Killer - ciskill.c // // Usage: ./ciskill device // // Author: Pasv pasvninja at gmail.com // // Credit: This exploit takes advantage of a vulnerability that was // discovered by Eric Smith on January 12,...

Debian DSA-869-1 : eric - missing input sanitising

The developers of eric, a full featured Python IDE, have fixed a bug in the processing of project files that could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...

[SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 869-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 869-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 869-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2005 http://www.debian.org/security/faq -...

DSA-869-1 eric - missing input sanitising

Bulletin has no description...

Debian DSA-843-1 : arc - insecure temporary file

Two vulnerabilities have been discovered in the ARC archive program under Unix. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2945 Eric Romang discovered that the ARC archive program under Unix creates a temporary file with insecure permissions...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Summary : CVE-2005-3068 affects the Eric IDE (eric3). Debian security advisory DSA-869-1 states the vulnerability is caused by missing input sanitising in eric, which could lead to arbitrary code execution. Affected releases: eric before 3.7.2; the fix is in eric 3.7.2-1 (and 3.6.2-2 for the rele...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068: Undefined Security Weakness

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

arc insecure temporary file creation

arc insecure temporary file creation Vendor: http://arc.sourceforge.net/ Advisory: http://www.zataz.net/adviso/arc-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. The temporary fil...

[VulnWatch] ncompress insecure temporary file creation

ncompress insecure temporary file creation Vendor: ftp://ftp.leo.org/pub/comp/os/unix/linux/sunsite/utils/compress/ Advisory: http://www.zataz.net/adviso/ncompress-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary...

Debian DSA-760-1 : ekg - several vulnerabilities

Several vulnerabilities have been discovered in ekg, a console Gadu Gadu client, an instant messaging program. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1850 Marcin Owsiany and Wojtek Kaniewski discovered insecure temporary file creatio...