Gentoo Security Advisory GLSA 200603-13 (pear-auth)

The remote host is missing updates announced in advisory GLSA 200603-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-0868

Affected product: BEA WebLogic Portal (Groupspace) versions 10.0 and 9.2 up to Maintenance Pack 1. Issue: Cross-site scripting (XSS) vulnerability that could allow remote authenticated users to inject arbitrary web script or HTML via unknown vectors. Root cause details are not provided in the ava...

CVE-2008-0868

Cross-site scripting XSS vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors...

CVE-2007-0868

CVE-2007-0868 concerns an unspecified vulnerability in the chat room feature of Yahoo! Messenger up to version 8.1.0.239, allowing a remote attacker to cause a denial of service. The impact is described as partial availability loss, with no confidentiality or integrity impact stated. The vulnerab...

CVE-2006-0868

PEAR::Auth back ends in PEAR-Auth are affected by multiple injection vulnerabilities that could allow remote attackers to falsify authentication credentials. Affected are Auth containers before 1.2.4 and 1.3.x before 1.3.0r4. The underlying storage containers are the source of the issue. Reported...

CVE-2006-0868

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...

MS Windows Message Queuing BoF Universal Exploit (MS05-017) (v.0.3)

漏洞描述：Microsoft消息队列技术允许不同时间运行的应用程序可以跨不同网络或跨临时离线的系统进行通讯。Microsoft消息队列的实现上存在远程代码执行漏洞，远程攻击者可能利用此漏洞控制系统。 漏洞起因是消息队列组件中未经检查的缓冲区。成功利用这个漏洞的攻击者可以完全控制受影响的系统，然后攻击者就可以安装程序，浏览，更改或删除数据，或创建拥有完全权限的新帐号。漏洞影响：Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...

CVE-2005-0868

CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...

CVE-2004-0868

CVE-2004-0868 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to 1 stronghold-info or 2 stronghold-status...

CVE-2001-0868

CVE-2001-0868 affects Red Hat Stronghold Secure Server (versions 2.3–3.0). A remote attacker can disclose sensitive system files by accessing /stronghold-info or /stronghold-status, leaking configuration details (e.g., httpd.conf) and other data. OpenVAS entries describe a file-system disclosure ...

CVE-2000-0868

The CVE-2000-0868 issue affects Apache 1.3.12 on SuSE Linux 6.4 where the default configuration exposes CGI script source code. The vulnerability arises because /cgi-bin/ requests can be rewritten to /cgi-bin-sdb/, which is an Alias of /cgi-bin, enabling remote attackers to disclose source code o...

CVE-2000-0868

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/...

CVE-1999-0868

CVE-1999-0868 concerns ucbmail where remote attackers can execute commands by supplying shell metacharacters to ucbmail via INN. Multiple connected sources (Red Hat, CVE/CVEList, NVD) reiterate the same vulnerability description but do not provide concrete fix versions or patches within the suppl...