Jan Lieskovsky

Um estouro de buffer baseado na pilha (heap) poderia permitir que invasores remotos causassem uma negação de serviço ou executassem código arbitrário por meio de uma linha UTF-8 do servidor contendo caracteres fora do Plano Multilíngue Básico (BMP).

**Nome do software vulnerável e versões afetadas: Versões do kdeplasma-addons anteriores à 4.10.5 Descrição: O problema diz respeito à macro %{password(...)} no arquivo pastemacroexpander.cpp, que não gera senhas corretamente. Isso permite que invasores contornem a autenticação por meio de um ataque de força bruta. Recomendações: Para versões anteriores à 4.10.5, atualize para a versão 4.10.5 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso a áreas confidenciais que dependem da macro %{password(...)} para autenticação até que a atualização seja aplicada.

A vulnerabilidade permite que usuários remotos autenticados provoquem uma negação de serviço, resultando em uma falha do servidor, ou possivelmente executem código arbitrário.

Várias vulnerabilidades de script entre sites (XSS) permitem que invasores remotos injetem scripts da Web ou HTML arbitrários por meio de entradas não especificadas em vários componentes, incluindo (1) Debug, (2) FeedPubSubHubbub, (3) LogFormatterXml, (4) TagCloudDecorator, (5) Uri, (6) ViewHelperHeadStyle, (7) ViewHelperNavigationSitemap ou (8) ViewHelperPlaceholderContainerAbstractStandalone, relacionadas ao Escaper.

A denial of service flaw was found in the way the server component of Freeciv processed certain packets. A remote attacker could send a specially-crafted packet that, when processed, would lead to memory exhaustion or excessive CPU consumption.

An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation incorrectly initialized integer arrays after memory allocation, potentially allowing them to have nonzero elements right after allocation. A remote attacker could use this flaw to obtain potentially sensitive information.

A Cross-Site Scripting (XSS) issue exists in the filter parameter to "cmd.php" in an export and exporter id action, and the filteruid parameter to "list.php".

An Information Disclosure issue exists in the Jasig Project php-pear-CAS package. The Central Authentication Service client library archives the debug logging file in an insecure manner in the /tmp directory.

A Cross-Site Scripting (XSS) issue exists in the export, add value form, and dn parameters to "cmd.php" API endpoint. This allows for potential malicious script execution.

The issue arises from the way certain URLs are processed, allowing a remote authenticated user to exploit a directory traversal flaw. This could enable the user to obtain the content of arbitrary local files by sending specially-crafted URL requests.

The issue arises from the way hardlink processes directory trees with deeply nested directories, leading to multiple stack-based buffer overflow flaws. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it. This could result in the hardlink executable crashing or potentially executing arbitrary code with the privileges of the user running the hardlink executable.

The issue allows a remote attacker to bypass or corrupt the integrity of services that rely on strong private RSA key generation mechanisms, due to the generation of an exponent value of '1' for private RSA key generation.

The issue allows a remote attacker to bypass the common authentication process by providing a NULL value as the password string, potentially gaining access to an account. This can be achieved by pressing the Ctrl-D keyboard sequence when the `use first pass` PAM configuration option is not used and the module is configured as 'sufficient' in the PAM configuration.

The issue arises from multiple integer overflows that lead to heap-based buffer overflows due to the way string lengths are concatenated in the calculation of the required memory space. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it, potentially leading to a hardlink executable crash or arbitrary code execution with user privileges.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform sanitization. This issue exists due to an incomplete fix.

The issue arises from the improper escaping of vocabulary help in the Drupal Views Bulk Operations (VBO) module when user tagging is enabled and the "Modify node taxonomy terms" action is used. This could allow a remote attacker to provide a specially-crafted URL, potentially leading to a cross-site scripting (XSS) attack.

The issue is related to a denial of service flaw in the way the ospf6d daemon performs routes removal.

The issue is related to information disclosure when the user's home directory is moved.

The issue allows a local attacker to conduct symlink attacks, potentially overwriting arbitrary files on the system. This is due to the insecure creation of a temporary file when generating OVAL system characteristics documents with the ovaldi integrated tool enabled.

The issue is related to a TOCTOU (time-of-check time-of-use) race condition that occurs when copying and removing directory trees.