Sun Solaris Name Service Cache Daemon (nscd(1M))本地特权提升漏洞

BUGTRAQ ID: 32921 CNCAN ID：CNCAN-2008122006 Sun Solaris是一款商业性质的操作系统。 Solaris名字服务缓存守护程序（name service cache daemon nscd1M）在部分条件下存在安全漏洞。允许非特权用户获得对未授权信息的访问和获得高特权。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun...

Solaris 5.9 (x86) : 138687-03

Portal Server 7.2 Solarisx86:Maintenance Patch. Date this patch was last updated by Sun : Jun/30/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Solaris 5.9 (sparc) : 138686-03

Portal Server 7.2 Solaris sparc: Maintenance Patch. Date this patch was last updated by Sun : Jun/30/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Solaris 10 (x86) : 138264-03

SunOS 5.10x86: nscd patch. Date this patch was last updated by Sun : Dec/15/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

User Engine Lite ASP (users.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== User Engine Lite ASP users.mdb Database Disclosure Vulnerability ==================================================================...

GLSA-200812-03 : IPsec-Tools: racoon Denial of Service

The remote host is affected by the vulnerability described in GLSA-200812-03 IPsec-Tools: racoon Denial of Service Two Denial of Service vulnerabilities have been reported in racoon: The vendor reported a memory leak in racoon/proposal.c that can be triggered via invalid proposals CVE-2008-3651...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Solaris 10 (x86) : 138224-03

SunOS 5.10x86: cron patch. Date this patch was last updated by Sun : Jan/14/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 138322-03

SunOS 5.10: Perl patch. Date this patch was last updated by Sun : Jun/08/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Unfixed XSS vulnerability at www.salonerotika.com

Security researcher BackDoor, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.salonerotika.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/03/2008. It is...

Unfixed XSS vulnerability at signup.0catch.com

Security researcher Uber0n, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting signup.0catch.com, which at the time of submission ranked 10822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/04/2008. It is current...

CVE-2008-6270

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6969...

Unfixed XSS vulnerability at www.scientologytoday.org

Security researcher 0rijin4l, has submitted on 11/02/2008 a cross-site-scripting XSS vulnerability affecting www.scientologytoday.org, which at the time of submission ranked 302088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It ...

Gentoo Security Advisory GLSA 200810-03 (libspf2)

The remote host is missing updates announced in advisory GLSA 200810-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

phpMyAdmin Import_Blacklist变量覆盖漏洞

BugCVE: CVE-2005-4079 BUGTRAQ: 15761 phpMyAdmin对某些变量的处理上存在漏洞，远程攻击者可能利用此漏洞在主机上执行任意命令。 phpMyAdmin将不应该被registerglobals仿真层覆盖的变量黑名单存储在全局变量中，但却没有包含$importblacklist变量名，因此攻击者可以覆盖该变量。如果覆盖了该变量的话，攻击者就可以用任意内容覆盖$GLOBALS数组，导致执行任意代码。 phpMyAdmin phpMyAdmin 2.7/2.7.0 beta1 phpMyAdmin ----------...

Sun Solaris C库未明权限提升漏洞

BUGTRAQ ID: 13856 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Sun Solaris C库中存在未经的权限提升漏洞，起因是C库libc3LIB和libproject3LIB中的未明安全问题。本地攻击者可以利用这个漏洞提升权限，完全控制受影响的系统。 Sun Solaris 10 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-101740）以及相应补丁: Sun-Alert-101740：Solaris 10 Security Issue With C Library libc3LIB and libproject3LIB...

Unfixed XSS vulnerability at www.movieinthebox.com

Security researcher CCC, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.movieinthebox.com, which at the time of submission ranked 2597534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2008. It is...

Unfixed XSS vulnerability at macombsheriffexplorers.com

Security researcher BackDoor, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting macombsheriffexplorers.com, which at the time of submission ranked 7456065 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. ...

Unfixed XSS vulnerability at www.greatmustangs.com

Security researcher CCC, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.greatmustangs.com, which at the time of submission ranked 4029457 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. It is...