669 matches found
Mono code execution
Untrusted search library...
[ MDVSA-2010:240 ] mono
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:240 http://www.mandriva.com/security/ Package : mono Date : November 24, 2010 Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in mono...
Mandriva Linux Security Advisory : mono (MDVSA-2010:240)
A vulnerability was discovered and corrected in mono : Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory CVE-2010-4159. Packages for 2009.0 are provided as of th...
CVE-2010-4159
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-4159
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...
DEBIAN-CVE-2010-4159
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...
Design/Logic Flaw
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-4159
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-4159
CVE-2010-4159 describes an untrusted search path vulnerability in the Mono runtime up to version 2.8, where metadata/loader.c could load a Trojan horse native library from the current working directory, allowing local privilege escalation. The root cause is insecure loading of libraries from the ...
CVE-2010-4159
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CGI Generic Padding Oracle
By manipulating the padding on an encrypted string, Nessus was able to generate an error message that indicates a likely 'padding oracle' vulnerability. Such a vulnerability can affect any application or framework that uses encryption improperly, such as some versions of ASP.net, Java Server Face...
CVE-2010-3369
The 1 mdb and 2 mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
Directory traversal
The 1 mdb and 2 mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3369
The 1 mdb and 2 mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3369
The CVE-2010-3369 issue affects mono-debugger:2.4.3 and earlier than 2.8.1, where a zero-length directory name placed in LD_LIBRARY_PATH by the mdb and mdb-symbolreader scripts can let a local user load a Trojan horse shared library from the current working directory and gain privileges. Affected...
CVE-2010-3369
The 1 mdb and 2 mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
Fedora Update for libgdiplus FEDORA-2010-13698
Check for the Version of libgdiplus OpenVAS Vulnerability Test Fedora Update for libgdiplus FEDORA-2010-13698 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 14 Update: libgdiplus-2.6.7-3.fc14
An Open Source implementation of the GDI+ API, it is part of the Mono Project...