6784 matches found
CVE-2006-0482: Undefined Security Weakness
Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service hang via a "date -s" command, which causes invalid sign extended arguments to be provided to the getcompattimespec function call...
CVE-2005-4674: Undefined Security Weakness
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...
vis.pl.txt
Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...
CVE-2005-4642: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...
Cross site scripting
Cross-site scripting XSS vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0142: Undefined Security Weakness
Cross-site scripting XSS vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4374: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to faq.asp and 2 searchQuery parameter to search.asp...
DSA-921-1 kernel-source-2.4.27 - several
Bulletin has no description...
CVE-2003-1279
CVE-2003-1279 affects S-PLUS 6.0 and enables local users to overwrite arbitrary files via a symlink attack on multiple temporary files (e.g., /tmp/__F8499, /tmp/PRINT.$$.out, /tmp/SUBST$PID.TXT, /tmp/ed.cmds$PID, /tmp/file.1, /tmp/file.2, /tmp/sgml2html$$tmp, etc.). The underlying issue is a syml...
CVE-2003-1279
S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on 1 /tmp/F8499 by Sqpe, 2 /tmp/PRINT.$$.out by PRINT, 3 /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, 4 /tmp/file.1 and /tmp/file.2 by sasget, 5 /tmp/file.1 by sasvars, an...
CVE-2003-1279: Undefined Security Weakness
S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on 1 /tmp/F8499 by Sqpe, 2 /tmp/PRINT.$$.out by PRINT, 3 /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, 4 /tmp/file.1 and /tmp/file.2 by sasget, 5 /tmp/file.1 by sasvars, an...
Sudo 1.6.8p9 - SHELLOPTSPS4 Environment Variables Privilege Escalation
Sudo 1.6.8p9 - SHELLOPTSPS4 Environment Variables Privilege Escalation Sudo local root escalation privilege vuln versions : sudo int main setuid0; system"/bin/sh"; % % gcc -o egg egg.c % setenv SHELLOPTS xtrace % setenv PS4 '$chown root:root egg' % sudo ./x.sh echo Getting root!! Getting root!! %...
wu-ftpd S/KEY authentication overflow
The remote Wu-FTPd server seems to be vulnerable to a remote overflow. This version contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacke...
Secure HyperText Transfer Protocol (S-HTTP) Detection
Detection of services supporting the Secure HyperText Transfer Protocol S-HTTP. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Vulnerabili...
robot(s).txt exists on the Web Server
Web Servers can use a file called /robots.txt to ask search engines to ignore certain files and directories. By nature this file can not be used to protect private files from public read access. OpenVAS Vulnerability Test $Id: webserverrobot.nasl 6053 2017-05-01 09:02:51Z teissa $ Description:...
wu-ftpd S/KEY authentication overflow
The remote Wu-FTPd server seems to be vulnerable to a remote overflow. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Deprecated Secure HyperText Transfer Protocol (S-HTTP) Reporting
This web server supports the deprecated Secure HyperText Transfer Protocol S-HTTP, a cryptographic layer that was defined in 1999 by RFC 2660. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
[SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 876-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 859-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...
SUSE-SA:2005:050: kernel
The remote host is missing the patch for the advisory SUSE-SA:2005:050 kernel. The Linux kernel was updated to fix the following security issues: - CVE-2005-2457: A problem in decompression of files on 'zisofs' filesystem was fixed. - CVE-2005-2458: A potential buffer overflow in the zlib...