67 matches found
Updated libvdpau packages fix security vulnerabilities
Updated libvdpau packages fix security vulnerabilities: libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files CVE-2015-5198...
CA Common Services Variable Handling Local Elevation of Privilege Vulnerability
CA is a leading global provider of IT management software and solutions, with products and technologies that span the full spectrum of IT environments, from mainframes to distributed systems, from virtualization to the cloud. A security vulnerability in CA Common Services' handling of specially...
GNU Bash Environment Variable Handling RCE Vulnerability (Shellshock, FTP, CVE-2014-6271/CVE-2014-6278) - Active Check
GNU Bash is prone to a remote command execution RCE vulnerability dubbed SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GNU Bash Environment Variable Handling RCE Vulnerability (Shellshock, SIP, CVE-2014-6271/CVE-2014-6278) - Active Check
GNU Bash is prone to a remote command execution RCE vulnerability dubbed Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
Intel Multiple Products Crafted UEFI Variable Handling Security Bypass
The version of the Intel BIOS on the remote device is affected by an unspecified security bypass vulnerability related to a flaw in the handling of certain Unified Extensible Firmware Interface UEFI variables. A knowledgeable remote malicious attacker may be able to exploit this issue to bypass...
CSCMS V3.5 ๆๆฐ่กฅไธๅ ๅไธไธชSQLๆณจๅฐ๏ผๆบ็ ่ฏฆๆ๏ผ
็ฎ่ฆๆ่ฟฐ๏ผ CSCMS V3.5 ๆๆฐ่กฅไธๅ ๅไธไธชSQLๆณจๅฐ๏ผๆบ็ ่ฏฆๆ๏ผ ไนๅ็ๆณจๅฐๅทฒ็ปไฟฎ่กฅไบ๏ผไฝๆฏ่ฟๆๅ ๅคๆณจๅฐ็นๆฒกๆๆณจๆๅฐ ่ฏฆ็ป่ฏดๆ๏ผ ๅจaddslash + ๅผๅทไฟๆค ็ๆ ๅตไธ ่ฆๆ ผๅคๆณจๆๆฐๅญๅๅ้็ๅค็ /app/controllers/home.php line:1020 public function gbookdel header"Expires: Mon, 26 Jul 1997 05:00:00 GMT"; header"Cache-Control: no-cache, must-revalidate"; header"Pragma: no-cache";...
AIX 5.3 TL 0 : iostat (IZ22350)
The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/iostat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
AIX 5.2 TL 0 : lsmcode (IZ15276)
The lsmcode command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/sbin/lsmcode. %NASLMINLEVEL 70300 C Tenable Network Security,...
php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix
The phpregistervariableex function in phpvariables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885...
Mandriva Security Advisory MDVSA-2009:059-1 (xchat)
The remote host is missing an update to xchat announced via advisory MDVSA-2009:059-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
FreeBSD telnetd sys_term.c Environment Variable Handling Privilege Escalation (FreeBSD-SA-09:05)
A flaw in the environment-handling code used by the telnet server running on the remote host fails to scrub the environment of variables such as 'LDPRELOAD' before calling the login program. An attacker who can place an arbitrary library on the remote host, either as a local user or remotely...
Code injection
Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."...
CVE-2008-2515
Unspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via unknown vectors related to an "environment variable handling error."...
Debian Security Advisory DSA 756-1 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 756-1. Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1769 Martijn Brinkers...
FreeBSD : squirrelmail -- _$POST variable handling allows for various attacks (7d52081f-2795-11da-bc01-000e0c2e438a)
A Squirrelmail Advisory reports : An extract$POST was done in optionsidentities.php which allowed for an attacker to set random variables in that file. This could lead to the reading and possible writing of other people's preferences, cross site scripting or writing files in webserver-writable...
MyBB 1.1 - Global Variable Overwrite
source: https://www.securityfocus.com/bid/17564/info MyBB is prone to a vulnerability that permits an attacker to overwrite global variables. This issue is due to a design flaw in handling HTTP GET and POST variables. An attacker can exploit this issue to overwrite the global variables with...
Debian DSA-756-1 : squirrelmail - several vulnerabilities
Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1769 Martijn Brinkers discovered cross-site scripting vulnerabilities that allow remote attackers to inject...
SquirrelMail < 1.4.5 Multiple Vulnerabilities
Binary data 3016.prm...
SquirrelMail < 1.45 Multiple Vulnerabilities
According to its banner, the version of SquirrelMail installed on the remote host is prone to multiple flaws : - Post Variable Handling Vulnerabilities Using specially crafted POST requests, an attacker may be able to set random variables in the file 'optionsidentities.php', which could lead to...
Low: Red Hat Security Advisory: glibc security update
Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. It was discovered that the use of LDDEBUG...