|
306631
|
- |
|
gnu
|
groff
|
The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes i…
|
CWE-59
Link Following
|
CVE-2009-5082
|
2024-11-21 10:11 |
2011-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306632
|
- |
|
gnu
|
groff
|
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the te…
|
CWE-59
Link Following
|
CVE-2009-5081
|
2024-11-21 10:11 |
2011-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306633
|
- |
|
gnu
|
groff
|
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain f…
|
CWE-59
Link Following
|
CVE-2009-5080
|
2024-11-21 10:11 |
2011-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306634
|
- |
|
gnu
|
groff
|
The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack …
|
CWE-59
Link Following
|
CVE-2009-5079
|
2024-11-21 10:11 |
2011-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306635
|
6.5 |
MEDIUM
Network
|
gnu apple
|
groff mac_os_x
|
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbi…
|
CWE-254
7PK - Security Features
|
CVE-2009-5078
|
2024-11-21 10:11 |
2011-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306636
|
- |
|
apple gnu
|
mac_os_x groff
|
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
|
CWE-59
Link Following
|
CVE-2009-5044
|
2024-11-21 10:11 |
2011-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306637
|
- |
|
creloaded
|
cre_loaded
|
CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) i…
|
CWE-287
Improper Authentication
|
CVE-2009-5077
|
2024-11-21 10:11 |
2011-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306638
|
- |
|
creloaded
|
cre_loaded
|
CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password…
|
CWE-287
Improper Authentication
|
CVE-2009-5076
|
2024-11-21 10:11 |
2011-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306639
|
- |
|
viewvc
|
viewvc
|
ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as demonstrated by a …
|
CWE-399
Resource Management Errors
|
CVE-2009-5024
|
2024-11-21 10:11 |
2011-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306640
|
- |
|
zeacom
|
chat_server
|
Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or…
|
CWE-310
Cryptographic Issues
|
CVE-2010-0217
|
2024-11-21 10:11 |
2011-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|