SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 5850)

Websphere has been updated to version 2.1.0.1 to fix several security vulnerabilities in the included subprojects, such as Apache Geronimo and Tomcat. CVE-2007-0184 / CVE-2007-0185 / CVE-2007-2377 / CVE-2007-2449 / CVE-2007-2450 / CVE-2007-3382 / CVE-2007-3385 / CVE-2007-3386 / CVE-2007-5333 /...

persists-overflow.txt

There is a buffer overflow in the AddFolder method of the Persists Software XUpload control, version 2.1.0.1. This object is marked safe for scripting. Version 3.0latest is not vulnerablethrows an error if the parameter is more than 256 characters, I have not tested any other versions. A quick...