10 matches found
SUSE CVE-2019-16159
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...
DEBIAN-CVE-2019-16159
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdow...
Cross site scripting
Cross-site scripting XSS vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message...
CVE-2008-0182
Cross-site request forgery CSRF vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message...
CVE-2008-0181
Cross-site scripting XSS vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message...
CVE-2008-0182
CVE-2008-0182 is a CSRF vulnerability in the Liferay Portal Admin portlet (pre-4.4.0). Remote authenticated users could cause actions as other authenticated users through the Shutdown message. Impact is partial integrity compromise; CVSS base score from NVD is 4.3 (Medium). The vulnerability is m...
Mandrake Linux Security Advisory : proftpd (MDKSA-2005:140)
Two format string vulnerabilities were discovered in ProFTPD. The first exists when displaying a shutdown message containin the name of the current directory. This could be exploited by a user who creates a directory containing format specifiers and sets the directory as the current directory whe...
DSA-795-2 proftpd - format string error
Bulletin has no description...
GLSA-200508-02 : ProFTPD: Format string vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200508-02 ProFTPD: Format string vulnerabilities 'infamous42md' reported that ProFTPD is vulnerable to format string vulnerabilities when displaying a shutdown message containing the name of the current directory, and when...
ProFTPD format string vulnerabilities
Format string in directory name on shutdown message...