Mandrake Security Advisory MDVSA-2009:054 (nagios)

The remote host is missing an update to nagios announced via advisory MDVSA-2009:054. OpenVAS Vulnerability Test $Id: mdksa2009054.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:054 nagios Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

openSUSE 10 Security Update : nagios (nagios-5168)

This update fixes several cross site scripting XSS issues in nagios CVE-2007-5624, CVE-2007-5803, CVE-2008-1360. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-5168. The text descripti...

SuSE 10 Security Update : nagios (ZYPP Patch Number 5165)

This update fixes several cross-site scripting XSS issues in nagios. CVE-2007-5624 / CVE-2007-5803 / CVE-2008-1360 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-1360

Cross-site scripting XSS vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts, a different issue than CVE-2007-5624...

CVE-2008-1360

Nagios2 CGI scripts before a fixed update are vulnerable to cross-site scripting (CVE-2007-5624, CVE-2007-5803, CVE-2008-1360). Exploitation is remote and relies on input sanitising gaps in the web interface, as detailed in Debian DSA-1883-1/DSA-1883-2 and OpenVAS entries. The issue is not limite...

CVE-2003-1360

CVE-2003-1360 describes a buffer overflow in the setupterm function of the HP-UX programs lanadmin and landiag , affecting HP-UX 10.0 through 10.34. The overflow is triggered by a long TERM environment variable, enabling a local user to potentially execute arbitrary code. The available documents ...

Debian DSA-1360-1 : rsync - buffer overflow

Sebastian Krahmer discovered that rsync, a fast remote file copy program, contains an off-by-one error which might allow remote attackers to execute arbitrary code via long directory names. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2007-1360

CVE-2007-1360 affects the Nodefamily module for Drupal 5.x, specifically versions before 5.x-1.0. The description reports an unspecified vulnerability that allows remote authenticated users to access and modify other users’ profiles via unspecified URL parameters. The available data do not specif...

CVE-2006-1360

CVE-2006-1360 describes multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2. Attack via parameters (id, type, show to index.php; message1 or message to cart.php) can allow remote attackers to execute arbitrary SQL commands. The description specifies the vulnerable inputs but does not pr...

SSH Multiple Vulns

According to its banner, the remote SSH server is vulnerable to one or more of the following vulnerabilities: CVE-2002-1357 incorrect length CVE-2002-1358 lists with empty elements/empty strings CVE-2002-1359 large packets and large fields CVE-2002-1360 string fields with zeros Some of these...

CVE-2005-1360

The CVE-2005-1360 issue affects GrayCMS 1.1 and concerns a PHP remote file inclusion in error.php. The underlying problem is that the path_prefix parameter can be manipulated to reference a URL on a remote server that contains executable PHP code, enabling remote code execution. The connected doc...

CVE-2004-1360

Unknown vulnerability in convfix in Sun Solaris 7 through 9, when invoked by convlpd, allows local users to overwrite arbitrary files...

CVE-2004-1360

The vulnerability CVE-2004-1360 concerns Sun Solaris versions 7–9, where the conv_fix function is exposed via conv_lpd. The root cause, as described, allows local users to overwrite arbitrary files, indicating a local-privilege/path-traversal like impact on file integrity. The sources provided (N...

CVE-2004-1360

Unknown vulnerability in convfix in Sun Solaris 7 through 9, when invoked by convlpd, allows local users to overwrite arbitrary files...

CVE-2003-1360

Buffer overflow in the setupterm function of 1 lanadmin and 2 landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable...

SSH Multiple Remote Vulnerabilities

According to its banner, the remote SSH server is affected by one or more of the following vulnerabilities : - CVE-2002-1357 incorrect length - CVE-2002-1358 lists with empty elements/empty strings - CVE-2002-1359 large packets and large fields - CVE-2002-1360 string fields with zeros The impact ...

CVE-2002-1360

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminat...

CVE-2002-1360

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminat...

CVE-2001-1360

Vulnerability in Scanner Access Now Easy SANE before 1.0.5, related to pnm and saned...

CVE-2001-1360

CVE-2001-1360 : Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5 related to pnm and saned. The supplied documents do not provide further technical details, root cause, affected components beyond those, exploitation vectors, impact specifics, or a patch/remediation. No in-the-wild expl...