Mandriva Update for cracklib MDVA-2008:180 (cracklib)

Check for the Version of cracklib OpenVAS Vulnerability Test Mandriva Update for cracklib MDVA-2008:180 cracklib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for mantis FEDORA-2008-8925

Check for the Version of mantis OpenVAS Vulnerability Test Fedora Update for mantis FEDORA-2008-8925 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Solaris 10 (x86) : 138877-01

SunOS 5.10x86: usr/lib/inet/in.dhcpd patc. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated check has been entirely replaced by solaris10x86148310.nasl. Disabled on 2015/05/22. C Tenable Network Security, Inc. T...

Solaris 10 (sparc) : 138876-01

SunOS 5.10: usr/lib/inet/in.dhcpd patch. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated check has been entirely replaced by solaris10148309.nasl. Disabled on 2015/05/22. C Tenable Network Security, Inc. The...

AIX 5.2 TL 10 : bos.rte.control (U815051)

The remote host is missing AIX PTF U815051, which is related to the security of the package bos.rte.control. An information leak exists in the 'bos.rte.control' fileset commands listed below. A local attacker may access sensitive information for arbitrary processes. The following commands are...

aeries-sqlxss.txt

Discovered By : Arsalan Emamjomehkashan aeries browser interfaceABI 3.8.3.14 Remote SQL Injection Website:http://aeries.com/ SQL injection: GradebookOptions.asp?GrdBk=SQL loginproc.asp If you post variable "SchlCode" XSS: UserName variable on loginproc.asp and usr on Login.asp...

[slackware-security] php for Slackware 11.0 reissued

The security/bug fix update for Slackware 11.0 has been reissued to fix a zero-length /usr/bin/php-cgi. Thanks to TJ Munro for pointing this out. Sorry for any inconvenience. Here are the details from the Slackware 11.0 ChangeLog: extra/php5/php-5.2.5-i486-2slack11.0.tgz: The security/bug fix...

HP-UX Security Patch : PHKL_28428

mmap/fork io,VM-JFS ddlock,thrd prf,usr lim %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26388; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2007-4937: Undefined Security Weakness

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

Solaris 8 (x86) : 114670-04

SunOS 5.8x86: /usr/bin/rcp patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-3100: Undefined Security Weakness

usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...

CVE-2007-3099: Undefined Security Weakness

usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...

CVE-2007-1369

inimodifier sgid-zendtech in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this...

Solaris 10 (sparc) : 124997-01 (deprecated)

SunOS 5.10: /usr/bin/tip patch. Date this patch was last updated by Sun : Jan/18/07 This plugin has been deprecated and either replaced with individual 124997 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

HP Tru64 Alpha OSF1 5.1 - ps Information Leak

HP Tru64 Alpha OSF1 5.1 - ps Information Leak !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to...

CVE-2007-0367: Undefined Security Weakness

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

AIX 4.2 /usr/dt/bin/dtterm Local Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include string.h char prog100="/usr/dt/bin/dtterm"; char prog230="dtterm"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;;...

IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow

No description provided by source. / /usr/sbin/iwsh.c exploit by DCRH 27/5/97 Tested on: R3000 Indigo Irix 5.3 R4400 Indy Irix 5.3 Irix 5.x only compile as: cc iwsh.c / include stdio.h include stdlib.h include string.h include sys/types.h include unistd.h define NUMADDRESSES 500 define BUFLENGTH...

expect (/usr/bin/expect) buffer overflow

No description provided by source. / hhp-expectsmash.c 12/11/00 expect /usr/bin/expect buffer overflow. Tested 5.31.8 and 5.28.1, slackware 7.x Maybe others. By: isox Site: www.hhp-programming.net Advisory: www.hhp-programming.net/ouradvisories/hhp-expectadv%2317.txt / include stdio.h include...

Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit

Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...