1346 matches found
openSUSE Security Update : glibc (openSUSE-SU-2010:0914-1)
This update of glibc fixes various bugs and security issues : CVE-2010-3847: Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an...
CVE-2010-3416
Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
CVE-2010-3416
Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
CVE-2010-3416
Google Chrome
CVE-2010-3416
Removed by vendor...
CVE-2010-3416
Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
CVE-2010-1891
The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...
ColdFusion Server Check
This module attempts to exploit the directory traversal in the 'locale' attribute. According to the advisory the following versions are vulnerable: ColdFusion MX6 6.1 base patches, ColdFusion MX7 7,0,0,91690 base patches, ColdFusion MX8 8,0,1,195765 base patches, ColdFusion MX8 8,0,1,195765 with...
Adobe ColdFusion 'locale' Parameter Directory Traversal
The version of Adobe ColdFusion running on the remote host is affected by a directory traversal vulnerability in the administrative web interface. Input to the 'locale' parameter of multiple pages is not properly sanitized. A remote, unauthenticated attacker can exploit this by sending specially...
CVE-2010-2861
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...
PT-2010-1184
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0.1 and earlier Description The issue allows remote attackers to read arbitrary files due to directory traversal vulnerabilities in the administrator console. This is achieved via the locale parameter to various...
MDVA-2009:124 : msec
This update fixes a number of issues with msec shipped with Mandriva Linux 2009.1: - Msec would send an error message when desktop notification support NOTIFYWARN was not found in the security configuration file 51364, 51464 - In some locales, msec would show an error message or incorrectly...
CVE-2010-1167
fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...
CVE-2010-1167
fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...
[Backports-security-announce] Security Update for drupal6
Luigi Gangitano uploaded new packages for drupal6 which fixed the following security problems: SA-CORE-2010-001 Multiple vulnerabilities and weaknesses were discovered in Drupal. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious us...
[SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2016-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 13, 2010 http://www.debian.org/security/faq -...
Debian DSA-2016-1 : drupal6 - several vulnerabilities
Several vulnerabilities SA-CORE-2010-001 have been discovered in drupal6, a fully-featured content management framework. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious user to craft a URL and perform a cross-site scripting attac...
[SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2016-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 13, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2016-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 13, 2010 http://www.debian.org/security/faq -...