Fedora 10 : mingw32-opensc-0.11.8-1.fc10 (2009-4928)

CVE-2009-1603 A minor update fixing security problem within pkcs11-tool command. http://www.opensc-project.org/pipermail/opensc- announce/2009-May/000025.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[ MDVSA-2009:123 ] opensc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:123 http://www.mandriva.com/security/ Package : opensc Date : May 27, 2009 Affected: 2009.1 Problem Description: src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-part...

CVE-2009-1603

CVE-2009-1603 affects OpenSC 0.11.7, specifically src/tools/pkcs11-tool.c. When used with unspecified third‑party PKCS#11 modules, it generates RSA keys with incorrect public exponents, allowing an attacker to read the cleartext form of messages that were intended to be encrypted. This vulnerabil...

Embedthis GoAhead < 2.1.8 Script Source Code Disclosure Vulnerability - Active Check

Embedthis GoAhead is prone to a script source code disclosure vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian Security Advisory DSA 1603-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 1603-1. OpenVAS Vulnerability Test $Id: deb16031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1603-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1603-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1604-1 : bind - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

CVE-2008-1603

Cross-site scripting XSS vulnerability in GNB DesignForm before 3.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the email form...

CVE-2008-1603

CVE-2008-1603 describes an XSS vulnerability in GNB DesignForm prior to 3.9, where an attacker could cause arbitrary script execution in a user’s browser through the email form. The issue stems from DesignForm, a CGI mail form, with unspecified vectors for the input that leads to script injection...

Default credentials

goform/QuickStartc0 on the GoAhead Web Server on the FS4104-AW aka rooter VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603...

CVE-2007-1603

CVE-2007-1603 describes an authentication bypass in admin/contest.php of the Weekly Drawing Contest 0.0.1, enabling remote attackers to bypass login and insert new contest information via a direct POST request. The CVSS vector (AV:N/AC:L/Au:N/C:P/I:P/A:P) yields a base score of 7.5 (HIGH), indica...

CVE-2006-1775

Multiple cross-site scripting XSS vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the 1 Site Description field in a adminboard.php, the 2 Group name and 3 Group description fields in b admingroups.php and c groupcp.php, the 4 Theme Name field in d...

CVE-2006-1603

The CVE-2006-1603 entry concerns a Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, exploitable through the cur_password parameter in profile.php. The affected software is phpBB 2.0.19, and the vulnerability is triggered via user-supplied input that can inject arbitrary script/HTML into ...

CVE-2006-1603

Cross-site scripting XSS vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the curpassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-1603

CVE-2005-1603 affects NiteEnterprises Remote File Manager 1.0. The vulnerability allows an attacker to trigger a denial-of-service (crash) by sending a crafted string to TCP port 7080. No exploit details or in-the-wild context are provided in the available documents. The sources list the impact a...

CVE-2002-1603

CVE-2002-1603 affects GoAhead Web Server 2.1.7 and earlier: an attacker can obtain ASP source code by requesting a URL terminated with /, , %2f, %20, or %00, causing the ASP file to be returned unparsed. The issue is a data disclosure due to how the server handles certain URL terminations. The vu...