Debian Security Advisory DSA 023-1 (inn2)

The remote host is missing an update to inn2 announced via advisory DSA 023-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 086-1 (ssh-nonfree, ssh-socks)

The remote host is missing an update to ssh-nonfree, ssh-socks announced via advisory DSA 086-1. OpenVAS Vulnerability Test $Id: deb0861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 086-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0361

CVE-2007-0361 describes a PHP remote file inclusion in PHPMyphorum 1.5a, exploitable via a URL in the chem parameter of mep/frame.php, allowing an attacker to execute arbitrary PHP code on affected systems. The vulnerability is classed with a CVSS v2 base score of 7.5 (HIGH) with network attack v...

CVE-2006-0361

The CVE-2006-0361 entry concerns Bit 5 Blog 8.01. The vulnerability is a cross-site scripting (XSS) flaw in addcomment.php, where an attacker can inject arbitrary script/HTML by supplying a javascript URI within an tag in the comment parameter. The filter reportedly strips most tags but not , en...

SSH over Non Standard Ports (CVE-2001-0361)

...

CVE-2004-0361

The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service segmentation fault by creating a new Array object with a large size value, then writing into that array...

CVE-2004-0361

The CVE-2004-0361 case concerns the Safari Javascript engine (Safari 1.2 and earlier). The vulnerability arises when code creates a new Array object with a large size value and then writes into that array, enabling a remote attacker to trigger a denial-of-service (segmentation fault). The availab...

CVE-2003-0361

The CVE-2003-0361 issue affects gPS prior to version 1.1.0, where rgpsp connection source acceptation policy was not correctly enforced by /etc/rgpsp.conf, potentially allowing unauthorized remote hosts to connect to rgpsp. Public sources (NVD entry) describe the vulnerability, and Debian OpenVAS...

CVE-2003-0361

gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp...

CVE-2001-0361

Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...

CVE-2001-0361

CVE-2001-0361 affects SSH v1.5 implementations, notably OpenSSH up to 2.3.0, AppGate, and ssh-1 up to 1.2.31, when configured in certain ways. The issue enables a remote attacker to decrypt and/or alter traffic via a Bleichenbacher attack on PKCS#1 version 1.5. The connected PT security entries (...

CVE-2001-0361

Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS1 version 1.5...

CVE-2000-0361

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...

CVE-2000-0361

The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...

CVE-1999-0361

CVE-1999-0361 affects NetWare deployments running LaserFiche (Novell NetWare version of LaserFiche). The vulnerable component is the storage of usernames and passwords in unencrypted form, and the vulnerability allows administrative changes to occur without logging. Public documentation consisten...

CVE-2000-0361

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...