576 matches found
Debian DSA-1774-1 : ejabberd - insufficient input sanitising
It was discovered that ejabberd, a distributed, fault-tolerant Jabber/XMPP server, does not sufficiently sanitise MUC logs, allowing remote attackers to perform cross-site scripting XSS attacks. The oldstable distribution etch is not affected by this issue. %NASLMINLEVEL 70300 C Tenable Network...
Debian DSA-1770-1 : imp4 - Insufficient input sanitising
Several vulnerabilities have been found in imp4, a webmail component for the horde framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4182 It was discovered that imp4 suffers from a cross-site scripting XSS attack via the user field in an IM...
[SECURITY] [DSA 1770-1] New imp4 packages fix cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1770-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 13, 2009 http://www.debian.org/security/faq -...
Debian DSA-1736-1 : mahara - insufficient input sanitising
It was discovered that mahara, an electronic portfolio, weblog, and resume builder, is prone to cross-site scripting attacks, which allows the injection of arbitrary Java or HTML code. The oldstable distribution etch does not contain mahara. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...
Debian DSA-1723-1 : phpmyadmin - insufficient input sanitising
Michael Brooks discovered that phpMyAdmin, a tool to administrate MySQL over the web, performs insufficient input sanitising allowing a user assisted remote attacker to execute code on the webserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 1723-1] New phpmyadmin packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1723-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 11, 2009 http://www.debian.org/security/faq -...
Debian DSA-1715-1 : moin - insufficient input sanitising
It was discovered that the AttachFile action in moin, a python clone of WikiWiki, is prone to cross-site scripting attacks CVE-2009-0260 . Another cross-site scripting vulnerability was discovered in the antispam feature CVE-2009-0312 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Debian DSA-1698-1 : gforge - insufficient input sanitising
It was discovered that GForge, a collaborative development tool, insufficiently sanitises some input allowing a remote attacker to perform SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Debian DSA-1682-1 : squirrelmail - insufficient input sanitising
Ivan Markovic discovered that SquirrelMail, a webmail application, did not sufficiently sanitise incoming HTML email, allowing an attacker to perform cross site scripting through sending a malicious HTML email. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Debian DSA-1675-1 : phpmyadmin - insufficient input sanitising
Masako Oono discovered that phpMyAdmin, a web-based administration interface for MySQL, insufficiently sanitises input allowing a remote attacker to gather sensitive data through cross site scripting, provided that the user uses the Internet Explorer web browser. This update also fixes a regressi...
[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
------------------------------------------------------------------------ Debian Security Advisory DSA-1675-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 30, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1664-1 (ekg)
The remote host is missing an update to ekg announced via advisory DSA 1664-1. OpenVAS Vulnerability Test $Id: deb16641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1664-1 ekg Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1664-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1666-1 : libxml2 - several vulnerabilities
Several vulnerabilities have been discovered in the GNOME XML library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4225 Drew Yao discovered that missing input sanitising in the xmlBufferResize function may lead to an infinite loop, resulting in...
[SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1666-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 17, 2008 http://www.debian.org/security/faq -...
Debian DSA-1664-1 : ekg - missing input sanitising
It was discovered that ekg, a console Gadu Gadu client performs insufficient input sanitising in the code to parse contact descriptions, which may result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
[SECURITY] [DSA 1664-1] New ekg packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1664-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 10, 2008 http://www.debian.org/security/faq -...
DSA-1664-1 ekg - denial of service
Bulletin has no description...
Debian DSA-1621-1 : icedove - several vulnerabilities
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0304 It was discovered that a buffer overflow in MIME decoding can lead t...