970 matches found
CVE-2008-0053
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file...
CVE-2008-0053
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file...
CVE-2008-0053
CVE-2008-0053: Two buffer overflows in the HP-GL/2-to-PostScript filter of CUPS could allow remote code execution when a crafted HP-GL/2 file is printed. The CVE is associated with CUPS releases patched in various advisories (e.g., RHSA-2008:0192, ELSA-2008-0192) and vendor-specific updates; Open...
CVE-2008-0053
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file...
CVE-2008-0053: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file...
Fedora 7 : rss-glx-0.8.1.p-15.fc7 / tempest-0-0.4.20070929.fc7 / xscreensaver-5.03-12.fc7 (2007-2652)
A bug was reported that xscreensaver unlocking password dialog crashes randomly. It is found this problem occurs when GL hack is launched without gl helper binary installed. The new three packages fixes this issue. Now packages which contain GL xscreensaver hacks also install gl helper binary...
CVE-2007-5585
CVE-2007-5585 affects xscreensaver 5.03 and earlier. Root cause: a crash when /usr/bin/xscreensaver-gl-helper is missing while running without xscreensaver-gl-extras, enabling a physically proximate user to access a previously locked session. The SUSE entry and Fedora/OpenVAS notes confirm update...
Design/Logic Flaw
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...
Directory traversal
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...
CVE-2007-3535
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...
CVE-2007-3535
GL-SH Deaf Forum 6.4.4 (and earlier) contains directory traversal flaws that allow remote attackers to include and execute arbitrary local files via two parameters: FORUM_LANGUAGE in functions.php and style in bottom.php. Root cause: improper validation/sanitization enabling …/ path traversal. Im...
CVE-2007-3535
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...
CVE-2007-3535: Undefined Security Weakness
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...
glsh-lfi.txt
GL-SH Deaf Board Version = 6.4.4 local file inclusion download: http://www.frank-karau.de/download/Deafforumversion6.4.3.zip found by: Katatafish [email protected] google dork:"2005 www.frank-karau.de" | "2006 www.frank-karau.de" exploit:...
GL-SH Deaf Forum <= 6.4.4 Local File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== GL-SH Deaf Forum = 6.4.4 Local File Inclusion Vulnerabilities ============================================================== GL-SH Deaf Board Version = 6.4.4 local file inclusi...
MDKA-2005:053 : drakxtools
A number of bugs have been fixed in this new drakxtools package, primarily within the drakconnect and XFdrake programs: The package requires perl-suid for fileshareset and filesharelist. Drakconnect fixes include: - don't duplicate variables MTU, NETMASK, IPADDR in ifcfg files - don't let...
NVIDIA binary graphics driver: Privilege escalation vulnerability
Background The NVIDIA binary graphics driver from NVIDIA Corporation provides the kernel module and the GL modules for graphic acceleration on the NVIDIA based graphic cards. Description Rapid7 reported a boundary error in the NVIDIA binary graphics driver that leads to a buffer overflow in the...
[SA20781] GL-SH Deaf Forum show.php Cross-Site Scripting
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
CVE-2006-3247
Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...