GLSA-200811-01 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200811-01 Opera: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Opera: Opera does not restrict the ability of a framed web page to change the address associated with a different frame CVE-2008-4195. Chri...

PT-2008-6105 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions 1.4.2 Description: The issue is related to insufficient randomness used to compose filenames of uploaded files used as attachments. This makes it easier for remote attackers to read these files by guessing filenames...

CVE-2008-3432

Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

Gentoo Security Advisory GLSA 200408-14 (acroread)

The remote host is missing updates announced in advisory GLSA 200408-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

FreeBSD Ports: wine

The remote host is missing an update to the system as announced in the referenced advisory. VID 48a59c96-9c6e-11d9-a040-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Security Advisory (FreeBSD-SA-05:11.gzip.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:11.gzip.asc ADV FreeBSD-SA-05:11.gzip.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Ports: xli

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: enscript-a4, enscript-letter, enscript-letterdj

The remote host is missing an update to the system as announced in the referenced advisory. VID 72da8af6-7c75-11d9-8cc5-000854d03344 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

afuse shell characters problem

Privilege escalation with shell characters in filenames...

cbrPager shell characters vulnerability

Shell characters vulnerability in archive filenames...

CVE-2008-2575

Removed by vendor...

CVE-2008-2575

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...

Sylpheed Filename Buffer Overflow Vulnerability

Overview Sylpheed contains a buffer overflow vulnerability exploitable via attachements with MIME-encoded filename. Impact An attacker could execute arbitrary code with the privileges of the user running Sylpheed. Solution Please refer to the 'Vendor Information' and 'References' section for...

DEBIAN-CVE-2008-1688

Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries...

CVE-2008-1568

comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs...

CVE-2008-1568

Summary: CVE-2008-1568 affects the Comix GTK comic viewer. The vulnerability arises when filenames containing shell metacharacters are passed to the external tools rar, unrar, or jpegtran, allowing arbitrary command execution. A related issue (CVE-2008-1796) concerns directory name predictability...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the 1 Core or 2 add-item modules; or via 3 HTTP PROPPATCH in the WebDAV module...