[CLOSE] OSVDB ID : 53227 - Disclosed: 2009-03-24

Description:

(Description Provided by CVE) : CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.

[CLOSE] OSVDB ID : 56412 - Disclosed: 2009-03-24

Description:

(Description Provided by CVE) : Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.

[CLOSE] OSVDB ID : 52958 - Disclosed: 2009-03-24

Description:

A buffer overflow exists in IBM Access Support ActiveX control. IbmEgath.dll fails to validate data passed to the GetXMLValue() method resulting in a stack overflow. With a specially crafted website, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 52858 - Disclosed: 2009-03-24

Description:

Jinzora contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'index.php' script not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied to the 'name' parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands which will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In additin, this flaw can potentially be used to disclose the contents of any file on the system.

[CLOSE] OSVDB ID : 53693 - Disclosed: 2009-03-24

Description:

pam_ssh contains a flaw that may lead to an unauthorized information disclosure.  The issue is triggered when "pam_ssh" returning different password prompts depending on whether or not a valid user name is supplied, which will disclose user information resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 53486 - Disclosed: 2009-03-24

Description:

(Description Provided by CVE) : The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.

[CLOSE] OSVDB ID : 53490 - Disclosed: 2009-03-24

Description:

PHPizabi contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'theme/default/proc.inc.php' script not properly sanitizing user-supplied input to the 'notepad_body' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 54565 - Disclosed: 2009-03-24

Description:

(Description Provided by CVE) : Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. (dot dot) in the dir parameter.

[CLOSE] OSVDB ID : 59825 - Disclosed: 2009-03-24

Description:

(Description Provided by CVE) : Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file, related to (1) glib/poppler-page.cc; (2) ArthurOutputDev.cc, (3) CairoOutputDev.cc, (4) GfxState.cc, (5) JBIG2Stream.cc, (6) PSOutputDev.cc, and (7) SplashOutputDev.cc in poppler/; and (8) SplashBitmap.cc, (9) Splash.cc, and (10) SplashFTFont.cc in splash/. NOTE: this may overlap CVE-2009-0791.

[CLOSE] OSVDB ID : 53164 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).

[CLOSE] OSVDB ID : 53165 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.

[CLOSE] OSVDB ID : 53166 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

[CLOSE] OSVDB ID : 53167 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.

[CLOSE] OSVDB ID : 53169 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.

[CLOSE] OSVDB ID : 53170 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.

[CLOSE] OSVDB ID : 53172 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."

[CLOSE] OSVDB ID : 53173 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."

[CLOSE] OSVDB ID : 53174 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "deserializing applets," aka CR 6646860.

[CLOSE] OSVDB ID : 53175 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.

[CLOSE] OSVDB ID : 53176 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.

[CLOSE] OSVDB ID : 53177 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.

[CLOSE] OSVDB ID : 53178 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.

[CLOSE] OSVDB ID : 53168 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.

[CLOSE] OSVDB ID : 53171 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.

[CLOSE] OSVDB ID : 55440 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55441 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55443 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55444 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55445 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55446 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55447 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56383 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56384 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56343 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56344 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56345 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 52863 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 53080 - Disclosed: 2009-03-23

Description:

Vendor denies that this is a software vulnerability because Piwik does not "store" the API key in "archive.sh" as alleged in the advisory -- it never configures (nor modifies) "archive.sh". The only way to expose the API key in "archive.sh" would be for a user to manually edit this example script in-situ.

[CLOSE] OSVDB ID : 53114 - Disclosed: 2009-03-23

Description:

(Description Provided by CVE) : The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.

[CLOSE] OSVDB ID : 53113 - Disclosed: 2009-03-23

Description:

Unknown / Incomplete