6796 matches found
netatalk shell characters vulnerabilities
Shell characters vulnerability on PostScript print jobs processing...
SuSE Update for cups SUSE-SA:2008:015
Check for the Version of cups OpenVAS Vulnerability Test $Id: gbsuse2008015.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for cups SUSE-SA:2008:015 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
IE Print Table of Links Cross-Zone Scripting
No description provided by source. html body 点击选项，选中打印链表列表，点打印 a href=”http://www.bl.com?zzz=dsasad script defer var ForWriting = 2; var strFile = ‘c:\test2.js’; var objFSO = new ActiveXObject’Scripting.FileSystemObject’; var objStream = objFSO.OpenTextFilestrFile,ForWriting,true,false;...
Samba注册表共享名非授权访问漏洞
BUGTRAQ ID: 33118 CVECAN ID: CVE-2009-0022 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 启用了注册表共享的Samba没有正确地验证共享名，通过认证的攻击者可以通过使用较老版本的smbclient并指定空字符串为共享名（如smbclient //server/ -U user%pass）来访问root文件系统。 Samba 3.2.0 - 3.2.6 临时解决方法： 通过registry shares = no禁用注册表共享。 厂商补丁： Samba -----...
Command injection
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
CVE-2008-5718
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
DEBIAN-CVE-2008-5718
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
CVE-2008-5718
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
PT-2008-6770 · Netatalk +1 · Netatalk +1
Name of the Vulnerable Software and Affected Versions: Netatalk versions prior to 2.0.4-beta2 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a print request. This can be achieved by using certain variables in a pipe command for the print...
Gentoo Security Advisory GLSA 200812-11 (cups)
The remote host is missing updates announced in advisory GLSA 200812-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CUPS: Multiple vulnerabilities
Background CUPS is the Common Unix Printing System. Description Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by regenrecht, reported via ZDI The...
CVE-2008-5385
enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors...
Star Articles 6.0 - Blind SQL Injection (1)
Star Articles 6.0 - Blind SQL Injection 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + stararticles blind sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...
SuSE 10 Security Update : CUPS (ZYPP Patch Number 5653)
Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server. CVE-2008-3639 / CVE-2008-3640 / CVE-2008-3641 %NASLMINLEVEL 70300 C Tenable Network Security,...
Gentoo Security Advisory GLSA 200711-16 (cups)
The remote host is missing updates announced in advisory GLSA 200711-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200501-30 (CUPS)
The remote host is missing updates announced in advisory GLSA 200501-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200703-28 (cups)
The remote host is missing updates announced in advisory GLSA 200703-28. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200804-23 (cups)
The remote host is missing updates announced in advisory GLSA 200804-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200411-17 (mtink)
The remote host is missing updates announced in advisory GLSA 200411-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200409-24 (foomatic)
The remote host is missing updates announced in advisory GLSA 200409-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...