CVE-2006-4716

Published: 12-09-2006
Updated: 17-10-2006

Product:
Fire Soft Board: Fire Soft Board RC3

Severity: High (7.0)

CVSS vector: (AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N)

Vulnerability type: Input validation error

Attack`s vector: Remotly exploitable

Potential loss type: Gain other access

Vulnerability description:
PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter.

Patch available: No

References:
http://securitydot.net/xpl/exploits/vulnerabilities/articles/1446/expl ...
Milw0rm: http://www.milw0rm.com/exploits/2319
BID: http://www.securityfocus.com/bid/19899
XF: http://xforce.iss.net/xforce/xfdb/28804

Cisco

Cisco Security Advisory: Cisco Security Agent Remote Code Execution Vulnerabilities

Cisco Security Agent is affected by vulnerabilities that could allow an unauthenticated attacker to ...

27 october, 2011

Cisco Security Advisory: Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras

A denial of service (DoS) vulnerability exists in the Cisco Video Surveillance IP Cameras 24 ...

27 october, 2011

Cisco Security Advisory: Cisco Unified Contact Center Express Directory Traversal Vulnerability

Cisco Unified Contact Center Express (UCCX or Unified CCX) and Cisco Unified IP Interactive ...

27 october, 2011

Microsoft

MS12-007: Vulnerability in AntiXSS Library Could Allow Information Disclosure (2607664)

This security update resolves one privately reported vulnerability in the Microsoft Anti-Cross Site ...

10 january, 2012

MS12-006: Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584)

This security update resolves a publicly disclosed vulnerability in SSL 3.0 and TLS 1.0.

10 january, 2012

MS12-005: Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2584146)

This security update resolves a privately reported vulnerability in Microsoft Windows.

10 january, 2012

Vulnerability Database

CVE-2011-3972

The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3971

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events.

National Vulnerability Database 08 february, 2012

CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3969

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents.

National Vulnerability Database 08 february, 2012

CVE-2011-3968

Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.

National Vulnerability Database 08 february, 2012

CVE-2011-3967

Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.

National Vulnerability Database 08 february, 2012

CVE-2011-3966

National Vulnerability Database 08 february, 2012

CVE-2011-3965

Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3964

Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3963

Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3962

Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3961

Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process.

National Vulnerability Database 08 february, 2012

CVE-2011-3960

Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3959

Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

National Vulnerability Database 08 february, 2012

CVE-2011-3958

Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.

National Vulnerability Database 08 february, 2012

Sun Microsystems

This Alert covers CVE-2010-0896 for the mail component of the Sun Convergence product

This Sun Alert covers CVE-2010-0896 for the mail component of the Sun Convergence product.

14 april, 2010

This Alert Covers CVE-2010-0893 for the Mail Component of the Sun Convergence Product

This Alert covers CVE-2010-0893 for the mail component of the Sun Convergence product.

14 april, 2010

SunOS 5.10_x86: ucode driver patch

6905530 processor microcode code can panic when retrieving microcode revision.

02 february, 2010

Red Hat

[RHSA-2010:1003-01] Moderate: git security update

Red Hat Security Advisory - Moderate: git security update

21 december, 2010

[RHSA-2010:1002-01] Moderate: mod_auth_mysql security update

Red Hat Security Advisory - Moderate: mod_auth_mysql security update

21 december, 2010

[RHSA-2010:1000-01] Important: bind security update

Red Hat Security Advisory - Important: bind security update

20 december, 2010

РоС

Cisco Security Advisory: Cisco Security Agent Remote Code Execution Vulnerabilities

Cisco Security Advisory: Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras

Cisco Security Advisory: Cisco Unified Contact Center Express Directory Traversal Vulnerability

MS12-007: Vulnerability in AntiXSS Library Could Allow Information Disclosure (2607664)

MS12-006: Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584)

MS12-005: Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2584146)

CVE-2011-3972

CVE-2011-3971

CVE-2011-3970

CVE-2011-3969

CVE-2011-3968

CVE-2011-3967

CVE-2011-3966

CVE-2011-3965

CVE-2011-3964

CVE-2011-3963

CVE-2011-3962

CVE-2011-3961

CVE-2011-3960

CVE-2011-3959

CVE-2011-3958

This Alert covers CVE-2010-0896 for the mail component of the Sun Convergence product

This Alert Covers CVE-2010-0893 for the Mail Component of the Sun Convergence Product

SunOS 5.10_x86: ucode driver patch

[RHSA-2010:1003-01] Moderate: git security update

[RHSA-2010:1002-01] Moderate: mod_auth_mysql security update

[RHSA-2010:1000-01] Important: bind security update

MS12-004 midiOutPlayNextPolyEvent Heap Overflow Exploit

ActFax Server FTP RETR Remote Buffer Overflow Exploit

ActFax Server (LPD/LPR) Remote Buffer Overflow Exploit