Solaris 5.8 (sparc) : 113176-03

PatchPro patch engine corrections. Date this patch was last updated by Sun : Dec/17/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ! definedfunc"bnrando...

Solaris 5.6 (sparc) : 113176-03

PatchPro patch engine corrections. Date this patch was last updated by Sun : Dec/17/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ! definedfunc"bnrando...

CVE-2006-5625

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...

CVE-2006-5625

CVE-2006-5625 affects the N/X 2002 Professional Edition WCMS (version 4.1 and earlier). It is a PHP remote file inclusion in wwwdev/nxheader.inc.php that allows an attacker to execute arbitrary PHP code via a URL in the c[path] parameter. CVSS 2.0 base score is 5.1 (MEDIUM) with network access, n...

CVE-2006-5625: Undefined Security Weakness

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Microsoft Security Bulletin MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 924164 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Excel Impact of Vulnerability: Remote Code Execution Maximum Severity Rating...

CVE-2006-3651

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

CVE-2006-2387

Microsoft Excel contains a remote-code-execution vulnerability CVE-2006-2387 in the parsing of a malformed DATETIME record within XLS files. Affected products include Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004–2006. The root cause is insuf...

CVE-2006-3651

CVE-2006-3651 is the Microsoft Word Mail Merge vulnerability. The connected documents confirm a memory handling flaw in Word’s mail-merge handling that can allow remote code execution when a specially crafted mail-merge file is opened. Affected products include Word 2000, 2002, 2003, and Word 200...

Security Update for Word 2002 (KB920817)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Project 2002 (KB923273)

A security vulnerability exists in Microsoft Project 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Visio 2002 (KB923273)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2006-3877: Improper Control of Generation of Code

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and...

CVE-2006-3876: Improper Control of Generation of Code

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694...

CVE-2006-3867: Undefined Security Weakness

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875...

VulnCheck KEV: CVE-2006-4534

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

CVE-2006-3651: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693...

HP-UX PHSS_33252 : HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS) (HPSBMA02149 SSRT050968 rev.1)

s700800 11.X OV ITO7.1X Comm Agt AIX A.07.17 : A potential security vulnerability has been identified in HP OpenView Operations. This potential vulnerability could be exploited remotely to allow unauthorized access or to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network...

[security bulletin] HPSBMA02149 SSRT050968 rev.1 - HP OpenView Operations, Remote Unauthorized Access and Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00767033 Version: 1 HPSBMA02149 SSRT050968 rev.1 - HP OpenView Operations, Remote Unauthorized Access and Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted...

CVE-2002-2218

CRLF injection in Haakon Nilsen SIPS: the setUserValue function in sipssys/code/site.inc.php is vulnerable via a CRLF sequence in a key value. The impact is stated as unknown, with possible privilege escalation or modification of critical configuration. No explicit exploit details or patch/mitiga...