5 matches found
CVE-2011-3350
masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...
Webs ID Cross Site Scripting
Webs ID Reflected XSS Cross-site Scripting Security Vulnerabilities Exploit Title: Webs ID /login.jsp &error Parameter Reflected XSS Cross-site Scripting Security Vulnerabilities Vendor: Webs, Inc Product: Webs ID Vulnerable Versions: Tested Version: Advisory Publication: April 02, 2015 Latest...
Linux Kernel net/子系统多个本地信息泄露漏洞
BUGTRAQ ID: 44630 Linux Kernel是开放源码操作系统Linux所使用的内核。 在Linux Kernel的net/子系统中net/ax25/afax25.c文件下的ax25getname函数和net/packet /afpacket.c文件下的packetgetnamespkt、packetgetname函数没有正确地初始化某些结构成员便将其拷贝到了用户空间,这可能导致泄漏内核栈内存。 Linux kernel 2.6.x 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Perl Safe Module 'reval()' and 'rdo()' Restriction-Bypass Vulnerabilities
The Perl Safe module is prone to multiple restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary Perl code outside of the restricted root. Versions prior to Safe 2.27 are vulnerable. OpenVAS Vulnerability Test $Id: gbperlsafe40305.nasl 5323 2017-02-17...
FreeBSD Ports: gnutls
The remote host is missing an update to the system as announced in the referenced advisory. VID 856a6f84-8b30-11de-8062-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 856a6f84-8b30-11de-8062-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...