Moodle < 1.9.4 'filter/tex/texed.php' 'pathname' Parameter RCE

Binary data 4788.prm...

Moodle 'filter/tex/texed.php' 'pathname' Parameter Remote Command Execution

The version of Moodle installed on the remote host fails to sanitize user-supplied input to the 'pathname' parameter before using it in the 'filter/tex/texed.php' script in a commandline that is passed to the shell. Provided that PHP's 'registerglobals' setting and the TeX Notation filter has bot...

Moodle 1.9.3 - Remote Code Execution

Moodle 1.9.3 Remote Code Execution Name Remote Code Execution in Moodle Systems Affected Moodle 1.9.3 and possibly earlier versions Severity High Impact CVSSv2 High 7.3/10, vector: AV:N/AC:L/Au:M/C:P/I:P/A:C Vendor http://moodle.org/ Advisory http://www.ush.it/team/ush/hack-moodle193/moodle193.tx...

Gentoo Security Advisory GLSA 200711-34 (cstetex)

The remote host is missing updates announced in advisory GLSA 200711-34. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-06:01.texindex.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:01.texindex.asc ADV FreeBSD-SA-06:01.texindex.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

PTeX: Multiple vulnerabilities

Background PTeX is a TeX distribution with Japanese support. It is used for creating and manipulating LaTeX documents. Description Multiple issues were found in the teTeX 2 codebase that PTeX builds upon GLSA 200709-17, GLSA 200711-26. PTeX also includes vulnerable code from the GD library GLSA...

SuSE 10 Security Update : TeX (ZYPP Patch Number 4818)

Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935 / CVE-2007-5937. dvips additionally created temporary files in an insecure manner. CVE-2007-5936 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

CSTeX: Multiple vulnerabilities

Background CSTeX is a TeX distribution with Czech and Slovak support. It is used for creating and manipulating LaTeX documents. Description Multiple issues were found in the teTeX 2 codebase that CSTeX builds upon GLSA 200709-17, GLSA 200711-26. CSTeX also includes vulnerable code from the GD...

[SECURITY] Fedora Core 6 Update: tetex-3.0-36.fc6

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...

[SECURITY] Fedora 8 Update: tetex-3.0-44.3.fc8

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...

DEBIAN-CVE-2007-5936

dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place...

[SECURITY] Fedora 7 Update: kdegraphics-3.5.8-7.fc7

Graphics applications for the K Desktop Environment, including kamera digital camera support kcoloredit palette editor and color chooser kdvi displays TeX .dvi files kghostview displays postscript files kiconedit icon editor kooka scanner application kpdf displays PDF files kruler screen ruler an...

tetex security update

CentOS Errata and Security Advisory CESA-2007:1028-01 Updated tetex packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX...

Important: Red Hat Security Advisory: tetex security update

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...

RHEL 2.1 / 3 : tetex (RHSA-2007:1028)

Updated tetex packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting command...

Important: Red Hat Security Advisory: tetex security update

Updated tetex packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting command...

[SECURITY] Fedora Core 6 Update: kdegraphics-3.5.7-1.fc6.1

Graphics applications for the K Desktop Environment. Includes: kdvi displays TeX .dvi files kghostview displays postscript files kcoloredit palette editor and color chooser kiconedit icon editor kolourpaint a simple drawing program ksnapshot screen capture utility kview image viewer for GIF, JPEG...

[SECURITY] Fedora 7 Update: kdegraphics-3.5.7-2.fc7

Graphics applications for the K Desktop Environment, including kamera digital camera support kcoloredit palette editor and color chooser kdvi displays TeX .dvi files kghostview displays postscript files kiconedit icon editor kooka scanner application kpdf displays PDF files kruler screen ruler an...

[SECURITY] Fedora Core 6 Update: tetex-3.0-35.fc6

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...

CentOS 3 / 4 / 5 : tetex (CESA-2007:0731)

Updated tetex packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a se...