[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 617-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 617-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

DSA-617-1 libtiff - insufficient input validation

Bulletin has no description...

Nuked-klaN 1.x - Submit Link Function HTML Injection

Nuked-klaN 1.x - Submit Link Function HTML Injection source: https://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the...

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful...

ShopCartCGI 2.3 - 'gotopage.cgi' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attacker may be able to gain access to...

SurfControl SuperScout WebFilter for Windows 2000 - SQL Injection

SurfControl SuperScout WebFilter for Windows 2000 - SQL Injection source: https://www.securityfocus.com/bid/5859/info SurfControl SuperScout WebFilter Reports Server is prone to SQL injection attacks. This issue is due to insufficient input validation on the part of some of the reports files, whi...

DB4Web 3.43.6 - File Disclosure

DB4Web 3.43.6 - File Disclosure source: https://www.securityfocus.com/bid/5723/info DB4Web is an application server that allows read and write access to relational databases and other information sources, via the web. The application is available for Windows, Linux, and various Unix platforms. A...

ShoutBox 1.2 - Form HTML Injection

ShoutBox 1.2 - Form HTML Injection source: https://www.securityfocus.com/bid/5354/info shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated ...

WorldClient 5.0.x - Arbitrary File Deletion

WorldClient 5.0.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary...

PHP-Nuke 4.x5.x - Arbitrary File Inclusion

PHP-Nuke 4.x5.x - Arbitrary File Inclusion source: https://www.securityfocus.com/bid/3889/info PHPNuke is a website creation/maintenance tool. The 'index.php' script has a feature which allows users to include files. Due to insufficent input validation, it is possible to include files located on ...

PHP-Nuke 4.x/5.x - Arbitrary File Inclusion

source: https://www.securityfocus.com/bid/3889/info PHPNuke is a website creation/maintenance tool. The 'index.php' script has a feature which allows users to include files. Due to insufficent input validation, it is possible to include files located on a remote server. Arbitrary code in the...

YaBB 9.1.2000 - Cross-Agent Scripting

YaBB 9.1.2000 - Cross-Agent Scripting source: https://www.securityfocus.com/bid/3828/info YaBB Yet Another Bulletin Board is freely available web forums/community software that is written in Perl. YaBB will run on most Unix/Linux variants, MacOS, and Microsoft Windows 9x/ME/NT/2000/XP platforms...

Дырка в NetBSD на процессорах Hitachi (privelege escalation)

Недостаточная проверка ввода пользователя в нескольких системных вазовах...

Дырка в postaci (SQL query modification)

недостаточная проверка ввода пользователя дает возможность модифицировать SQL-запрос...

Leif M. Wright - ad.cgi 1.0 Unchecked Input

Leif M. Wright - ad.cgi 1.0 Unchecked Input source: https://www.securityfocus.com/bid/2103/info ad.cgi is an ad rotation script freely available, and written by Leif Wright. A problem exists in the script which may allow access to restricted resources. The problem occurs in the method in which th...

YaBB 9.11.2000 - 'search.pl' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/1921/info YaBB Yet Another Bulletin Board is a popular perl-based bulletin board scripting package. search. pl, one of several perl scripts which comprise YaBB, fails to properly validate user input which arguments a call to open. A malicious user could...