RHEL 2.1 : tcpdump (RHSA-2003:085)

Updated tcpdump packages are available to fix a denial of service vulnerability in tcpdump. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Tcpdump is a command-line tool for monitoring network traffic. The ISAKMP parser in tcpdump 3.6 through...

RHEL 2.1 : kernel (RHSA-2004:354)

Updated kernel packages that fix a security vulnerability affecting the kernel nfs server for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to ma...

Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection

Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into databas...

Expinion.net Member Management System 2.1 - news_view.asp?ID SQL Injection

Expinion.net Member Management System 2.1 - newsview.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into...

Expinion.net Member Management System 2.1 - 'register.asp?err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...

Expinion.net Member Management System 2.1 - register.asp?err Cross-Site Scripting

Expinion.net Member Management System 2.1 - register.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a...

Expinion.net Member Management System 2.1 - 'resend.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The problem is reported to exist in the 'ID' parameter...

MDKSA-2004:020 - Updated gdk-pixbuf packages fix BMP-handling vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gdk-pixbuf Advisory ID: MDKSA-2004:020 Date: March 10th, 2004 Affected versions: Corporate Server 2.1 Problem Description: A vulnerability in gdk-pixbuf versions before 0.20 exists that could allow ...

ZH2003-26SA (security advisory): TSguestbook Ver. 2.1 Cross-Site Scripting Vulnerability

ZH2003-26SA security advisory: TSguestbook Ver. 2.1 Cross-Site Scripting Vulnerability Published: 31/08/2003 Released: 31/08/2003 Name: TSguestbook http://www.tsinter.net Affected Systems: All versions Issue: Remote attackers can insect XSS script Author: Trash-80 - [email protected]...

Path Disclosure in Turba of Horde

There is a path disclosure in status.php of Turba module at Horde 2.1, you get this: Fatal error: Call to a member function on a non-object in /opt/local/apache/htdocs/horde/turba/status.php on line 12 NOTE: i observed that this only occur in Turba...

CVE-2002-0412

NTOP is affected by CVE-2002-0412 due to a format string vulnerability in the TraceEvent function prior to version 2.1. The issue allows remote attackers to execute arbitrary code by injecting format strings into syslog calls. Attack vectors include an HTTP GET request, or credentials supplied in...

Mailman: cross-site scripting bug

Product: Mailman Affected Version: 2.1 not other version has been tested Vendor's URL: http://www.gnu.org/software/mailman/ Solution: TBC Author: Manuel Rodriguez Introduction: ------------ Mailman is software to help manage electronic mail discussion lists, much like Majordomo or Smartmail. And...

vSignup, vAuthenticate (PHP)

Informations : °°°°°°°°°°°°°° ----------------------- Product : vAuthenticate Version : 2.8 ----------------------- Product : vSignup Version : 2.1 ----------------------- Website : http://www.beanbug.net Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° chgpwd.php :...

CVE-2002-1028

Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service crash via long arguments...

CVE-2001-1118

CVE-2001-1118 affects Roxen Web platform (Roxen 2.0 prior to 2.0.92 and Roxen 2.1 prior to 2.1.264). The issue is a failure to properly decode UTF-8, Mac, and ISO-2202 encoded URLs, enabling a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL. Affected compo...

CVE-2001-1261

CVE-2001-1261 affects Avaya Argent Office 2.1. The vulnerability allows remote attackers to alter hold music by spoofing a legitimate server’s response to a TFTP broadcast and supplying an alternate HoldMusic file. Root cause is spoofed TFTP responses enabling an attacker to substitute playback m...

CVE-2001-1262

CVE-2001-1262 affects Avaya Argent Office 2.1, where a user-provided SNMP community string is compared only up to its length, allowing remote attackers to bypass authentication with a 0-length string. The documents do not provide any remediation or patch details. No exploitation status or in-the-...

CVE-2001-0648

CVE-2001-0648 describes a directory traversal vulnerability in PHProjekt 2.1 and earlier. A remote attacker can perform a dot-dot (..) attack on the file module to conduct unauthorized activities. The NVD entry lists a base score of 5.0 (Medium) with network access, low attack complexity, no auth...

CVE-1999-1385

Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable...

CVE-1999-1565

CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...