9917 matches found
Simple PHP Blog comments.php Traversal Arbitrary File Access
The remote version of Simple PHP Blog allows for retrieval of arbitrary files from the web server. These issues are due to a failure of the application to properly sanitize user-supplied input data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
imlib2: Buffer overflows in image decoding
Background imlib2 is an advanced replacement for image manipulation libraries such as libXpm. It is utilized by numerous programs, including gkrellm and several window managers, to display images. Description Pavel Kankovsky discovered that several buffer overflows found in the libXpm library see...
[Full-Disclosure] [gentoo-announce] [ GLSA 200501-11 ] Dillo: Format string vulnerability
Gentoo Linux Security Advisory GLSA 200501-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
pdftohtml: Vulnerabilities in included Xpdf
Background pdftohtml is a utility to convert PDF files to HTML or XML formats. It makes use of Xpdf code to decode PDF files. Description Xpdf is vulnerable to integer overflows, as described in GLSA 200412-24. Impact An attacker could entice a user to convert a specially-crafted PDF file,...
DSA-631-1 kdelibs - unsanitised input
Bulletin has no description...
DSA-630-1 lintian - insecure temporary directory
Bulletin has no description...
DSA-628-1 imlib2 - integer overflows
Bulletin has no description...
DSA-626-1 tiff - unsanitised input
Bulletin has no description...
xzgv: Multiple overflows
Background xzgv is a picture viewer for X, with a thumbnail-based file selector. Description Multiple overflows have been found in the image processing code of xzgv, including an integer overflow in the PRF parsing code CAN-2004-0994. Impact An attacker could entice a user to open or browse a...
Important: Red Hat Security Advisory: samba security update
Updated samba packages that fix an integer overflow vulnerability are now available for Red Hat Enterprise Linux 2.1. Samba provides file and printer sharing services to SMB/CIFS clients. Greg MacManus of iDEFENSE Labs discovered an integer overflow bug in Samba versions prior to 3.0.10. An...
Low: Red Hat Security Advisory: vim security update
Updated vim packages that fix a modeline vulnerability are now available. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. Ciaran McCreesh discovered a modeline vulnerability in VIM. It is possible that a malicious user could create a file containing a specially...
DSA-623-1 nasm - buffer overflow
Bulletin has no description...
ArGoSoft FTP Server USER Command Account Enumeration
The remote host is running the ArGoSoft FTP Server. The remote version of this software returns different error messages when a user attempts to log in using a nonexistent username or a bad password. An attacker may exploit this flaw to launch a dictionary attack against the remote host in order ...
PT-2004-3612 · Tenable · Nessus
Name of the Vulnerable Software and Affected Versions: Nessus version 2.0.10a Description: The issue concerns the storage of account passwords in plaintext within .nessusrc files. This allows local users to obtain these passwords. It is noted that the vendor has disputed this issue...
DSA-620-1 perl - insecure temporary files / directories
Bulletin has no description...
CUPS: Multiple vulnerabilities
Background The Common UNIX Printing System CUPS is a cross-platform print spooler, hpgltops is a CUPS filter handling printing of HPGL files and lppasswd is a program used locally to manage spooler passwords. Description CUPS makes use of vulnerable Xpdf code to handle PDF files CAN-2004-1125...
ViewCVS < 1.0.0 Multiple Vulnerabilities
The remote host is running ViewCVS, a tool to browse CVS repositories over the web written in python. Flaws in the remote version of this website may allow an attacker to launch cross-site scripting and/or HTTP response-splitting attacks against the remote install. %NASLMINLEVEL 70300 C Tenable...
[SA13187] Spy Sweeper Enterprise Privilege Escalation Vulnerability
TITLE: Spy Sweeper Enterprise Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA13187 VERIFY ADVISORY: http://secunia.com/advisories/13187/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Spy Sweeper Enterprise 1.x http://secunia.com/product/4256/...
RHEL 3 : acroread (RHSA-2004:674)
An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...
KDE Security Advisory: Konqueror Java Vulnerability
KDE Security Advisory: Konqueror Java Vulnerability Original Release Date: 2004-12-20 URL: http://www.kde.org/info/security/advisory-20041220-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1145 http://www.heise.de/security/dienste/browsercheck/tests/java.shtml 1. Syste...