7256 matches found
Gentoo Security Advisory GLSA 200903-20 (websvn)
The remote host is missing updates announced in advisory GLSA 200903-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200903-20 (websvn)
The remote host is missing updates announced in advisory GLSA 200903-20. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
[ GLSA 200903-20 ] WebSVN: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200903-20 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Openswan: Insecure temporary file creation
Background Openswan is an implementation of IPsec for Linux. Description Dmitry E. Oboukhov reported that the IPSEC livetest tool does not handle the ipseclive.conn and ipsec.olts.remote.log temporary files securely. Impact A local attacker could perform symlink attacks to execute arbitrary code...
CVE-2008-6424
The CVE-2008-6424 entry corresponds to a directory traversal flaw in FFFTP 1.96b. An attacker-controlled FTP LIST response containing .. can cause the remote FTP server to create or overwrite arbitrary files on the affected system. The vulnerability arises from how LIST command results are handle...
SupportSoft DNA Editor Module - dnaedit.dll Code Execution
SupportSoft DNA Editor Module - dnaedit.dll Code Execution !-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID:...
SupportSoft DNA Editor Module Code Execution
OBJECT classid='clsid:01110800-3E00-11D2-8470-0060089874ED...
SupportSoft DNA Editor Module (dnaedit.dll) Code Execution Exploit
Exploit for unknown platform in category remote exploits ================================================================== SupportSoft DNA Editor Module dnaedit.dll Code Execution Exploit ================================================================== !-- SupportSoft DNA Editor Module...
CVE-2008-6398
sngregress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/recompiled$$.png, 2 /tmp/decompiled$$.sng, and 3 /tmp/canonicalized$$.sng temporary files...
CVE-2008-6397
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-6398
sngregress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/recompiled$$.png, 2 /tmp/decompiled$$.sng, and 3 /tmp/canonicalized$$.sng temporary files...
CVE-2008-6397
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
Design/Logic Flaw
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-6397
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-6397
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-6398
CVE-2008-6398 affects SNG 1.0.2 and involves a local file overwrite via a symlink attack on temporary files (/tmp/recompiled$$.png, /tmp/decompiled$$.sng, /tmp/canonicalized$$.sng). The root cause is improper handling of symlinks that allows local users to overwrite arbitrary files. The fixed/mit...
The CGI script of the invasion to get started quickly+script method of use-vulnerability warning-the black bar safety net
Preface: The following explanation is directed to Europe and the United States Japan website When we are doing penetration analysis of the time there are many ways to We all know the foreign servers are mostly linux platform So there are many website programs have 6 Chengdu will use a cgi script ...
Mandrake Security Advisory MDVSA-2009:041 (jhead)
The remote host is missing an update to jhead announced via advisory MDVSA-2009:041. OpenVAS Vulnerability Test $Id: mdksa2009041.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:041 jhead Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-0011
CVE-2009-0011 affects Apple Mac OS X 10.5.6; Certificate Assistant mishandles temporary files via an insecure file operation, allowing a local user to overwrite arbitrary files. Root cause: insecure handling of a temporary file. Impact: local elevation of privilege with potential for data integri...