73 matches found
CVE-2006-1772
debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/databaseadminpass record, which...
CVE-2006-1772
CVE-2006-1772 affects Debian GNU/Linux where, during configuration of mnogosearch in the mnogosearch-common 3.2.31-1 package, the debconf process stores the cleartext database administrator password in a world-readable config.dat instead of the restricted passwords.dat in mnogosearch-common/datab...
CVE-2006-1772: Undefined Security Weakness
debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mnogosearch-common/databaseadminpass record, which...
[SA19589] Debian mnogosearch Insecure Password Storage Security Issue
TITLE: Debian mnogosearch Insecure Password Storage Security Issue SECUNIA ADVISORY ID: SA19589 VERIFY ADVISORY: http://secunia.com/advisories/19589/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: Local system OPERATING SYSTEM: Debian GNU/Linux 3.1...
Mnogosearch search.cgi Detection
Binary data 2499.prm...
CVE-2004-1059
CVE-2004-1059 describes multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch, affecting version 3.2.26 and earlier. The issues allow remote attackers to inject arbitrary HTML and web script via the next/prev result search pages and the extended and simple search forms. The connected...
CVE-2004-1059
Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...
CVE-2004-1059: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...
CVE-2004-1059
Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...
CVE-2004-0288
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document...
CVE-2004-0288
CVE-2004-0288 affects mnoGoSearch versions 3.2.13–3.2.15, where a buffer overflow in UdmDocToTextBuf could allow a remote attacker to execute arbitrary code by indexing a large document. The OpenVAS/OpenBSD/NVD entries confirm the vulnerability and impact, but no patch/version fix is specified in...
CVE-2004-0288
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document...
CVE-2004-0288: Undefined Security Weakness
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document...
[CLA-2003:711] Conectiva Security Announcement - mnogosearch
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : mnogosearch SUMMARY : Remote buffer overflow...
CVE-2003-0437
Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter...
CVE-2003-0436
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter...
CVE-2003-0437
Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter...
CVE-2003-0437
The CVE-2003-0437 entry concerns the mnoGoSearch 3.2.10 search.cgi CGI. A buffer overflow is triggered by a long tmplt parameter, allowing remote attackers to execute arbitrary code. Connected sources corroborate a history of remote-overflow vulnerabilities in the mnoGoSearch search.cgi component...
CVE-2003-0436
The CVE-2003-0436 issue affects mnoGoSearch 3.1.20, with a buffer overflow in search.cgi triggered by a long ul parameter that enables remote code execution with the webserver’s privileges. The Conectiva advisory Colorado 2003:711 notes this vulnerability and provides upgrade guidance to a newer ...