Debian Security Advisory DSA 198-1 (nullmailer)

The remote host is missing an update to nullmailer announced via advisory DSA 198-1. OpenVAS Vulnerability Test $Id: deb1981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 198-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 490-1 (zope)

The remote host is missing an update to zope announced via advisory DSA 490-1. OpenVAS Vulnerability Test $Id: deb4901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 490-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 254-1 (traceroute-nanog)

The remote host is missing an update to traceroute-nanog announced via advisory DSA 254-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 113-1 (ncurses)

The remote host is missing an update to ncurses announced via advisory DSA 113-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 130-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 130-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 125-1 (analog)

The remote host is missing an update to analog announced via advisory DSA 125-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Excel Macro Validation Uninitialized Variable Manipulation Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Excel...

Microsoft Office Publisher多个拒绝服务漏洞

BUGTRAQ ID: 26982 CNCAN ID:CNCAN-2007122407 Microsoft Office Publisher是一款微软提供的桌面出版应用软件。 Microsoft Office Publisher处理特殊构建的程序存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立一个Publisher文件，并修改00006B90到00006D90为A，可导致应用程序崩溃。或者建立的新文件增加一个使用多个“A”的"wordart"选项，然后修改000077D0到000079B0为A。可导致应用程序崩溃。 Microsoft Publisher 2007 0...

Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability

No description provided by source. /------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll...

aquick-winosx.txt

Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows exploit From Metasploit:...

Apple QuickTime 7.2/7.3 (OSX/Windows) - RSTP Response Universal

Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows exploit From Metasploit:...

CVE-2002-2426

Cross-site request forgery CSRF vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the...

CVE-2002-2426

The CVE-2002-2426 entry describes a CSRF vulnerability in Citrix Presentation Server 4.0/4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0–2.0. The issue arises from the InitialProgram key in an ICA connection, allowing remote attackers to run published applications (and possibly ...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability. CVE-2007-6026. Dos exploit for windows platform source: http://www.securityfocus.com/bid/26468/info Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly...

CVE-2002-2421

CVE-2002-2421 affects acWEB 1.14 and is triggered by a remote HTTP request for a MS-DOS device name (e.g., COM2), causing a denial of service (crash). The vulnerability is network-exposed with no authentication and results in complete availability impact; CVSSv2 base score 7.8 (HIGH). Publicly av...

CVE-2002-2418

CVE-2002-2418 describes an XSS vulnerability in acFreeProxy (acFP) 1.33 beta 7 where a crafted URL is inserted into an error page, allowing arbitrary script/HTML execution. Impact: partial integrity with no confidentiality/availability impact stated; attack surface is remote over a network with n...

CVE-2002-2406

CVE-2002-2406 affects LiteServe’s HTTP server (versions 2.0, 2.0.1, 2.0.2). The vulnerability is a buffer overflow in the HTTP server that can be triggered by a large number of percent characters (%) in an HTTP GET request, leading to a denial of service (hang). Documented impact is partial avail...

CVE-2002-2397

The CVE-2002-2397 entry concerns Sygate Personal Firewall 5.0, where a remote attacker could bypass firewall filters by spoofing the source IP to 127.0.0.1 or the 127.0.0.0 network. The connected records reiterate the same description (product/version and bypass via spoofed loopback addresses) bu...

CVE-2002-2399

The CVE-2002-2399 entry describes a directory traversal vulnerability in W3Mail 1.0.6, specifically in viewAttachment.cgi, where an attacker can read arbitrary files by supplying a .. sequence in the file parameter. This is supported by multiple sources (NVD entry and Red Hat security page) that ...

CVE-2002-2402

The CVE-2002-2402 entry concerns SURECOM broadband router EP-4501, which ships with default SNMP community strings: read = “public” and read/write = “secret.” This default configuration allows remote attackers to read and modify router configuration information. The vulnerability is tied to the d...