Fedora Core 5 : mod_perl-2.0.2-5.2.fc5 (2007-576)

This update fixes a security issue in modperl. An issue was found in the 'namespacefromuri' method of the ModPerl::RegistryCooker class. If a server implemented a modperl registry module using this method, a remote attacker requesting a carefully crafted URI can cause resource consumption, which...

DEBIAN-CVE-2007-2714

Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors...

Command injection

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR \r sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username...

Fedora Core 5 : openoffice.org-2.0.2-5.16.2 (2006-770)

CVE-2006-2198 macro security - CVE-2006-2199 java applets - CVE-2006-3117 corrupt file format more details at http://www.openoffice.org/security/bulletin-20060629.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Application Enhancer (APE) 2.0.2 - Local Privilege Escalation

!/usr/bin/ruby Exploit Of The Apes: A practical pwnage for Application UNEnhancer aka APU c 2006 LMH and Johnny Pwnerseed. This goes dedicated to macdev. For the childish flaming and great brain lag. Lesson: Don't talk about stuff you have NFC about. And don't insult people. Once you do it, and g...

CVE-2006-6673

CVE-2006-6673 affects WinFtp Server 2.0.2. A remote attacker can trigger a crash (DoS) by sending abnormally long commands for (1) PASV, (2) LIST, (3) USER, (4) PORT, and possibly other commands. The entry notes a network-based vulnerability with no authentication required and an impact limited t...

CVE-2006-6673

WinFtp Server 2.0.2 allows remote attackers to cause a denial of service crash via long 1 PASV, 2 LIST, 3 USER, 4 PORT, and possibly other commands...

WinFtp Server 2.0.2 (PASV) Remote Denial of Service Exploit

No description provided by source. import sys,os,string import socket import struct import time print "-----------------------------------------------------------------------" print " WinFtp Server Version 2.0.2 Denial of Service" print " url: http://www.wftpserver.com/" print " author: shinnai"...

WinFTP Server 2.0.2 - 'PASV' Remote Denial of Service

import sys,os,string import socket import struct import time print "-----------------------------------------------------------------------" print " WinFtp Server Version 2.0.2 Denial of Service" print " url: http://www.wftpserver.com/" print " author: shinnai" print " mail:...

security flaw

A "stack overwrite" vulnerability in GnuPG gpg 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory...

VMware ESX多个信息泄露漏洞

VMWare ESX Server是一款虚拟主机的服务程序。 VMWare ESX Server存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息。 VMWare ESX Server包含的管理接口是传统的WEB应用程序，使用的会话ID包含在两个COOKIE中（vmware.mui.kid和vmware.mui.sid），这会话ID格式包含BASE64编码的用户帐户和密码，如果攻击者可以通过其他机制访问COOKIE，就可以获得验证信息。 另外管理接口还提供更改密码的功能，通过HTML表单，用户需要输入和确定新的密码，如更改ROOT用户的密码为"test"，就需要如下请求：...

JVN#47223461 tDiary cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected 2.0.2 stable and earlier 2.1.4.20061115 developer version and earlier...

Solaris 9 (sparc) : 115738-06

GNOME 2.0.2: Base GUI Libraries Patch. Date this patch was last updated by Sun : Mar/07/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 5.9 (sparc) : 114822-05

GNOME 2.0.2: 64bit libpng Patch. Date this patch was last updated by Sun : Sep/29/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2006-5674

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to 1 bbfuncforums.php, 2 bbfunctions.php, or 3 the RSS plugin...

CVE-2006-5673

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-5673

Summary: CVE-2006-5673 affects MiniBB prior to a fixed version (2.0.2 and earlier) and is caused by improper sanitization of the pathToFiles parameter in the PHP script bb_func_txt.php when PHP register_globals is enabled. An unauthenticated attacker could request a remote file include, potential...

CVE-2006-5188

CVE-2006-5188 describes a directory traversal vulnerability in the download.php of the webGENEius GOOP Gallery 2.0.2. The vulnerability could allow remote attackers to read or list data from certain files or directories via unspecified vectors. The available sources (NVD/NVD detail, CVE listings)...

CVE-2006-5188

Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors...

CVE-2006-4511

Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...