PHP-Calendar Multiple Script phpc_root_path Parameter Remote File Inclusion

The remote web server is running PHP-Calendar, a web-based calendar written in PHP. The remote version of this software is vulnerable to a file inclusion flaw that could allow an attacker to execute arbitrary PHP commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Xpdf, GPdf: New integer overflows

Background Xpdf is an open source viewer for Portable Document Format PDF files. GPdf is a Gnome-based PDF viewer that includes some Xpdf code. Description A new integer overflow issue was discovered in Xpdf's Gfx::doImage function. Impact An attacker could entice an user to open a...

WordPress < 1.5.1 Multiple XSS and SQL Injection Vulnerabilities

According to its banner, the remote version of WordPress is vulnerable to a cross-site scripting attack that may allow an attacker to use the remote server to steal the cookies of third-party users on the remote site. In addition, the remote version of this software is vulnerable to a SQL injecti...

Debian DSA-612-1 : a2ps - unsanitised input

Rudolf Polzer discovered a vulnerability in a2ps, a converter and pretty-printer for many formats to PostScript. The program did not escape shell meta characters properly which could lead to the execution of arbitrary commands as a privileged user if a2ps is installed as a printer filter...

Cscope: Insecure creation of temporary files

Background Cscope is a developer utility used to browse and manage source code. Description Cscope creates temporary files in world-writable directories with predictable names. Impact A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere...

Adobe Acrobat Reader: Buffer overflow vulnerability

Background Adobe Acrobat Reader is a utility used to view PDF files. Description A buffer overflow has been discovered in the email processing of Adobe Acrobat Reader. This flaw exists in the mailListIsPdf function, which checks if the input file is an email message containing a PDF file. Impact ...

Singapore Gallery < 0.9.11 Multiple Vulnerabilities

Singapore is a PHP based photo gallery web application. The remote version of this software is affected by multiple vulnerabilities that may allow an attacker to read arbitrary files on the remote host or to execute arbitrary PHP commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Samba smbd Security Descriptor Parsing Remote Overflow

The remote Samba server, according to its version number, is vulnerable to a remote buffer overrun resulting from an integer overflow vulnerability. To exploit this flaw, an attacker would need to send to the remote host a malformed packet containing hundreds of thousands of ACLs, which would in...

ncpfs: Buffer overflow in ncplogin and ncpmap

Background ncpfs is a NCP protocol network filesystem that allows access to Netware services, for example to mount volumes of NetWare servers or print to NetWare print queues. Description Karol Wiesek discovered a buffer overflow in the handling of the '-T' option in the ncplogin and ncpmap...

Ocean12 ASP Calendar Administrative Access

The remote host is running Ocean12 ASP Calendar, a web-based application written in ASP. There is a flaw in the remote software which may allow anyone execute administrative commands on the remote host by requesting the page /admin/main.asp. An attacker may exploit this flaw to deface the remote...

PhpDig < 1.8.5 Unspecified Vulnerability

The remote host is running phpDig, an open source search engine written in PHP. The remote version of this software is affected by a vulnerability that may allow an attacker to tamper with the integrity of the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

PunBB URL Quote Tag XSS

According to its banner, the remote version of PunBB is vulnerable to cross-site scripting attacks because the application does not validate URL and quote tags. With a specially crafted URL, an attacker may be able to inject arbitrary HTML and script code into a user's browser, resulting in a los...

Debian DSA-606-1 : nfs-utils - wrong signal handler

SGI has discovered that rpc.statd from the nfs-utils package, the Network Status Monitor, did not ignore the 'SIGPIPE'. Hence, a client prematurely terminating the TCP connection could also terminate the server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

PDFlib: Multiple overflows in the included TIFF library

Background PDFlib is a library providing functions to handle PDF files. It includes a modified TIFF library used to process TIFF images. Description The TIFF library is subject to several known vulnerabilities see GLSA 200410-11. Most of these overflows also apply to PDFlib. Impact A remote...

rssh, scponly: Unrestricted command execution

Background rssh and scponly are two restricted shells, allowing only a few predefined commands. They are often used as a complement to OpenSSH to provide access to remote users without providing any remote execution privileges. Description Jason Wies discovered that when receiving an authorized...

Debian DSA-604-1 : hpsockd - missing input sanitising

'infamous41md' discovered a buffer overflow condition in hpsockd, the socks server written at Hewlett-Packard. An exploit could cause the program to crash or may have worse effect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

WS_FTP Server Multiple Command Remote Overflow DoS

According to its version number, the remote WSFTP server is vulnerable to multiple buffer overflows which may be used by an attacker to execute arbitrary code on the remote system. C Tenable Network Security include"compat.inc"; ifdescription scriptid15857; scriptbugtraqid11772;...

PHPNews sendtofriend.php 'mid' Parameter SQLi

The PHPNews application running on the remote web server is affected by a SQL injection vulnerability due to improper validation of user-supplied input to the 'mid' parameter tin the sendtofriend.php script. A remote attacker can exploit this to inject arbitrary SQL commands. %NASLMINLEVEL 70300 ...

Open DC Hub: Remote code execution

Background Open DC Hub is the hub software for the Direct Connect file sharing network. Description Donato Ferrante discovered a buffer overflow vulnerability in the RedirectAll command of the Open DC Hub. Impact Upon exploitation, a remote user with administrative privileges can execute arbitrar...

phpWebSite: HTTP response splitting vulnerability

Background phpWebSite is a web site content management system. Description Due to lack of proper input validation, phpWebSite has been found to be vulnerable to HTTP response splitting attacks. Impact A malicious user could inject arbitrary response data, leading to content spoofing, web cache...