SuSE9 Security Update : dhcpcd (YOU Patch Number 12699)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note: this is a...

SuSE9 Security Update : dhcpcd (YOU Patch Number 12696)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 %NASLMINLEVEL 70300 C...

isc-dhcp-client -- dhclient does not strip or escape shell meta-characters

ISC reports: ISC dhclient did not strip or escape certain shell meta-characters in responses from the dhcp server like hostname before passing the responses on to dhclient-script. Depending on the script and OS, this can result in execution of exploit code on the client...

SuSE 11.1 Security Update : logwatch (SAT Patch Number 4236)

Shell meta characters in log file names could lead to execution of arbitrary code. CVE-2011-1018 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

Debian: Security Advisory (DSA-2182-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2182-1 (logwatch)

The remote host is missing an update to logwatch announced via advisory DSA 2182-1. OpenVAS Vulnerability Test $Id: deb21821.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2182-1 logwatch Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2182-1 : logwatch - shell command injection

Dominik George discovered that Logwatch does not guard against shell meta-characters in crafted log file names such as those produced by Samba. As a result, an attacker might be able to execute shell commands on the system running Logwatch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE9 Security Update : gnome-vfs2,gnome-vfs2-doc (YOU Patch Number 10010)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

openSUSE Security Update : libzypp (libzypp-273)

This update fixes the handling of meta-characters in repos. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libzypp-273. The text description of this plugin is C SUSE LLC...

Ubuntu 8.04 LTS / 8.10 : moodle vulnerabilities (USN-791-1)

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

MDVA-2008:025 : drakxtools

This drakxtools update package fixes issues with the hardrake tool to make sure that USB keys are not auto-configured by the service at boot 34568, and adds back the Run Config tool button in the harddrake interface 34794. An issue where bootloader-config would use vmlinuz-desktop or...

Mandriva Update for hplip MDKSA-2007:201 (hplip)

Check for the Version of hplip OpenVAS Vulnerability Test Mandriva Update for hplip MDKSA-2007:201 hplip Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for xfce4-terminal vulnerability USN-497-1

Ubuntu Update for Linux kernel vulnerabilities USN-497-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4971.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xfce4-terminal vulnerability USN-497-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-526-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for hplip vulnerability USN-530-1

Ubuntu Update for Linux kernel vulnerabilities USN-530-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5301.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for hplip vulnerability USN-530-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for debian-goodies vulnerability USN-526-1

Ubuntu Update for Linux kernel vulnerabilities USN-526-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5261.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for debian-goodies vulnerability USN-526-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-530-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dotCMS 1.6 - id Local File Inclusion

dotCMS 1.6 - id Local File Inclusion ++++++++++++++++++++++++++++++++++++++++++++++++++++++ + script:dotCMS + home: http://www.dotcms.org + demo: http://www.dotcms.org/thedotcms/demos/demo.dot + founder: Don of h4cky0u.org + Vulnerability: Directory traversal...

dotCMS 1.6 (id) Multiple Local File Inclusion Vulnerabilities

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++ + script:dotCMS + home: http://www.dotcms.org + demo: http://www.dotcms.org/thedotcms/demos/demo.dot + founder: Don of h4cky0u.org + Vulnerability: Directory traversal...