29 matches found
EUVD-2002-1374
Malware in sbrugna...
Debian Security Advisory DSA 223-1 (geneweb)
The remote host is missing an update to geneweb announced via advisory DSA 223-1. OpenVAS Vulnerability Test $Id: deb2231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 223-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-712-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 712-1 (geneweb)
The remote host is missing an update to geneweb announced via advisory DSA 712-1. OpenVAS Vulnerability Test $Id: deb7121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 712-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-223)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-0391
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...
CVE-2005-0391
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...
CVE-2005-0391
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...
DEBIAN-CVE-2005-0391
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...
[SECURITY] [DSA 712-1] New geneweb packages fix insecure file operations
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 712-1 [email protected] http://www.debian.org/security/ Martin Schulze April 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 712-1] New geneweb packages fix insecure file operations
-------------------------------------------------------------------------- Debian Security Advisory DSA 712-1 [email protected] http://www.debian.org/security/ Martin Schulze April 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 712-1] New geneweb packages fix insecure file operations
-------------------------------------------------------------------------- Debian Security Advisory DSA 712-1 [email protected] http://www.debian.org/security/ Martin Schulze April 19th, 2005 http://www.debian.org/security/faq -...
CVE-2005-0391
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...
CVE-2005-0391
Removed by vendor...
CVE-2005-0391
Geneweb (versions 4.10 and earlier) is affected by insecure file operations during file conversion, where maintainer scripts do not properly validate file permissions and content, potentially permitting modification of arbitrary files. This CVE (CVE-2005-0391 / CAN-2005-0391) is discussed in Debi...
Debian DSA-712-1 : geneweb - insecure file operations
Tim Dijkstra discovered a problem during the upgrade of geneweb, a genealogy software with web interface. The maintainer scripts automatically converted files without checking their permissions and content, which could lead to the modification of arbitrary files. %NASLMINLEVEL 70300 C Tenable...
CVE-2005-0391: Undefined Security Weakness
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files...
Debian DSA-223-1 : geneweb - information exposure
A security issue has been discovered by Daniel de Rauglaudre, upstream author of geneweb, a genealogical software with web interface. It runs as a daemon on port 2317 by default. Paths are not properly sanitized, so a carefully crafted URL lead geneweb to read and display arbitrary files of the...
CVE-2002-1390
CVE-2002-1390 concerns the GeneWeb daemon (before version 4.09), where improper handling of requested paths enables a remote attacker to read arbitrary files via a crafted URL. The issue is documented in the Debian DSA-223 advisory (and mirrored OpenVAS/NVD records). Mitigation per connected sour...