405 matches found
CVE-2007-5085: Improper Authentication
Unspecified vulnerability in the management EJB MEJB in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors...
CVE-2007-1987: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pluginfile parameter to smarty/internals/core.loadpulgins.php or the 2 rootpath parameter to index.php. NOTE: CVE disputes 1 because the inclusion occurs...
Ubuntu 4.10 : python2.2, python2.3 vulnerability (USN-73-1)
The Python developers discovered a flaw in the SimpleXMLRPCServer module. Python XML-RPC servers that used the registerinstance method to register an object, but do not have a dispatch method, allowed remote users to access or change function internals using the im and func attributes. Note that...
Security fix for the ALT Linux 5 package xpdf version 3.01-alt2pl1
Dec. 7, 2005 Victor Forsyuk 3.01-alt2pl1 - Security fix CAN-2005-3193. - Updated japanese and korean support packages. - Fix allocation size for 64bit architecture. - Fix to don't use freetype internals. - Apply upstream patch to fix resize/redraw...
USN-73-1: Python vulnerability
The Python developers discovered a flaw in the SimpleXMLRPCServer module. Python XML-RPC servers that used the registerinstance method to register an object, but do not have a dispatch method, allowed remote users to access or change function internals using the im and func attributes...