Debian Security Advisory DSA 360-1 (xfstt)

The remote host is missing an update to xfstt announced via advisory DSA 360-1. OpenVAS Vulnerability Test $Id: deb3601.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 360-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0625

NoMachine NX Server (prior to version 2.1.0-18) is affected by CVE-2007-0625. The vulnerability lies in nxconfigure.sh, which does not validate the invoking user, allowing local users to modify server configuration keys in /usr/NX/etc/server.cfg. This can lead to an unspecified denial of service....

CVE-2006-0625

CVE-2006-0625 affects SPIP 1.8.2g and earlier, enabling directory traversal through the GLOBALS[type_urls] parameter to read or include arbitrary files, which could then be used to execute arbitrary code via direct static code injection in spip_acces_doc.php3. The documentation specifies the vuln...

CVE-2005-0625

reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd...

CVE-2005-0625

CVE-2005-0625 affects reportbug 3.2, where settings from .reportbugrc are included in bug reports, exposing sensitive data such as smtpuser and smtppasswd. The underlying issue is the unintended leakage of stored mail credentials via bug reports. The impact is credential exposure; the available s...

CVE-2005-0625

reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd...

CVE-2004-0625

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page...

CVE-2004-0625

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page. Based on CVE-2004-0625 details, the issue enables partial confidentiality/integrity/availability impact (per CVSSv2: AV:N/AC:L/Au:N/C:P/I:P/A:P). Exploitation s...

CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...

CVE-2003-0625

xfstt (Debian Woody stable) is affected by CVE-2003-0625 due to an off-by-one error that can allow remote attackers to read memory from the xfstt process during the connection handshake. The issue, part of CAN-2003-0625 alongside CAN-2003-0581, enables memory leakage that could aid fingerprinting...

CVE-2003-0625

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server's response...

CVE-2001-0625

ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...

CVE-2001-0625

ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log...

CVE-2000-0625

CVE-2000-0625 refers to NetZero 3.0 and earlier, which stores login credentials using weak encryption. The underlying issue is insecure storage that allows a local user to decrypt the password. No remediation details are provided in the sources; the impact is partial confidentiality and integrity...

CVE-2000-0625

NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...

CVE-1999-0625

The set of connected sources documents CVE-1999-0625 as related to the rpc.rquotad service running. The Red Hat entry and the CVE/NVD records confirm the existence of this service but provide no public technical details such as affected product versions, root cause, or concrete exploit paths with...

CVE-1999-0625

The rpc.rquotad service is running...