59 matches found
CVE-2007-2808
Cross-site scripting XSS vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter...
CVE-2007-2808
Cross-site scripting XSS vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter...
CVE-2007-2808
Cross-site scripting XSS vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter...
CVE-2007-2808
CVE-2007-2808 affects gnatsweb/gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99, where inadequate sanitization of the database parameter in the main CGI script allows remote XSS via arbitrary HTML/script. Debian's DSA-1486-1 notes the fix in gnatsweb 4.00-1etch1, indicating remediation by upgrading ...
Gnats XSS vuln
GNATS XSS vuln Vuln. discovered by : r0t Date: 19 May 2007 vendor:http://www.gnu.org/software/gnats/ affected versions: tested on Gnatsweb v4.00, Gnats v4.1.99 orginal advisory:http://pridels-team.blogspot.com/2007/05/blog-post.html Gnats contains a flaw that allows a remote Cross-Site Scripting...
CVE-2005-2180
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files...
CVE-2005-2180
CVE-2005-2180 concerns the GNATS generator, where in GNATS 4.0/4.1.0 (and possibly earlier) if the binary is installed setuid, it fails to properly validate files passed to the -o option and opens the target with write access, enabling a local user to overwrite arbitrary files. This is the core c...
CVE-2005-2180
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files...
CVE-2005-2180
Removed by vendor...
gnats.txt
Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system gnats user, whe...
GNU GNATS 4.0/4.1 - Gen-Index Arbitrary Local File Disclosure/Overwrite
source: https://www.securityfocus.com/bid/14169/info GNU GNATS gen-index allows local attackers to disclose and overwrite arbitrary files. A successful attack can result in privilege escalation and a complete compromise of the affected computer as gen-index is installed with setuid permissions. G...
gnats (GNU problem report management system) privilege escalation
By using -o option it's possible to overwrite local file with 'gnats' or 'root' user's privileges depending on installation...
GNU GNATS 4.04.1 - Gen-Index Arbitrary Local File DisclosureOverwrite
GNU GNATS 4.04.1 - Gen-Index Arbitrary Local File DisclosureOverwrite source: https://www.securityfocus.com/bid/14169/info GNU GNATS gen-index allows local attackers to disclose and overwrite arbitrary files. A successful attack can result in privilege escalation and a complete compromise of the...
CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog...
CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog...
FreeBSD : gnats -- format string vulnerability (59)
The following package needs to be updated: gnats %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgfc99c736349911d998a70090962cff2a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...
Debian DSA-590-1 : gnats - format string vulnerability
Khan Shirani discovered a format string vulnerability in gnats, the GNU problem report management system. This problem may be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
[SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 590-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 590-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2004 http://www.debian.org/security/faq -...
