Mandriva Linux Security Advisory : freeciv (MDVSA-2010:205)

A vulnerability was discovered and corrected in freeciv : freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7...

[ MDVSA-2010:205 ] freeciv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:205 http://www.mandriva.com/security/ Package : freeciv Date : October 15, 2010 Affected: 2010.0, 2010.1 Problem Description: A vulnerability was discovered and corrected in freeciv: freeciv 2.2 before 2.2.1...

DEBIAN-CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

Design/Logic Flaw

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

UBUNTU-CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445

CVE-2010-2445 affects Freeciv 2.2.x before 2.2.1 and 2.3.x before 2.3.0. A vulnerability in the Lua scripting component allows a scenario to load restricted Lua modules (os, io, package, dofile, loadfile, loadlib, module, require), enabling remote attackers to read arbitrary files or execute arbi...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2445: Improper Neutralization of Special Elements used in an OS Command

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

Fedora Core 12 FEDORA-2009-13592 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-13592. OpenVAS Vulnerability Test $Id: fcore200913592.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13592 wireshark Authors: Thomas Reinke Copyright: Copyright c...

[SECURITY] Fedora 9 Update: lighttpd-1.4.20-6.fc9

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

Fedora 9 : pdns-recursor-3.1.7-2.fc9 (2008-6893)

Fri Jul 25 2008 Ruben Kerkhof - 3.1.7-2 - Exclude ppc and ppc64 for now, the build fails randomly - Fri Jul 25 2008 Ruben Kerkhof - 3.1.7-1 - Upstream released new version, now with Lua support Note that Tenable Network Security has extracted the preceding description block directly from the...

[SECURITY] Fedora 7 Update: midori-0.0.17-3.fc7

Midori is a lightweight web browser, and has many features expected of a modern browser, including: Full integration with GTK+2. Fast rendering with WebKit. Tabs, windows and session management. Bookmarks are stored with XBEL. Searchbox based on OpenSearch. Custom context menu actions. User scrip...

[SECURITY] Fedora 8 Update: midori-0.0.17-3.fc8

Midori is a lightweight web browser, and has many features expected of a modern browser, including: Full integration with GTK+2. Fast rendering with WebKit. Tabs, windows and session management. Bookmarks are stored with XBEL. Searchbox based on OpenSearch. Custom context menu actions. User scrip...

[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

[SA19260] monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution

TITLE: monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution SECUNIA ADVISORY ID: SA19260 VERIFY ADVISORY: http://secunia.com/advisories/19260/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: monotone 0.x http://secunia.com/product/8767/ DESCRIPTION: A...