Microsoft Windows SMB Registry : Windows 2003 Server Service Pack Detection

It is possible to determine the Service Pack version of the Windows 2003 system. by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17662; scriptversion"1.35";...

CVE-2005-0820

CVE-2005-0820 affects Microsoft Office InfoPath 2003 SP1. The issue arises from sensitive data in the Manifest.xsf file of a custom .xsn form, enabling access to printer and network information, database name, username/password, and internal web server name. The connected records show a CVSSv2 ba...

CVE-2003-1131

PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code...

HP-UX PHSS_28686 : s700_800 11.04 Virtualvault 4.6 OWS update

s700800 11.04 Virtualvault 4.6 OWS update : The remote HP-UX host is affected by multiple vulnerabilities : - A remotely exploitable potential vulnerability has been reported in CAN-2003-0078. - 1 A defect in the JavaTM Virtual Machine may allow illegal access to protected fields or methods of an...

HP-UX PHSS_30055 : s700_800 11.04 Virtualvault 4.7 IWS update

s700800 11.04 Virtualvault 4.7 IWS update : The remote HP-UX host is affected by multiple vulnerabilities : - Multiple stack-based buffer overflows in modalias and modrewrite modules for Apache versions prior to 1.3.29. - Potential Apache HTTP server vulnerabilities have been reported:...

HP-UX PHSS_30058 : s700_800 11.04 Webproxy server 2.1 update

s700800 11.04 Webproxy server 2.1 update : The remote HP-UX host is affected by multiple vulnerabilities : - Potential Apache HTTP server vulnerabilities have been reported: CVE-2003-0545 CVE-2003-0543 CVE-2003-0544 CERT VU935264 CERT VU255484 CERT VU255484 CERT VU686224 CERT VU732952 CERT VU1042...

HP-UX PHSS_30057 : HPSBUX0310-284 SSRT3622 rev.3 HP-UX Apache HTTP Server Denial of Service,unauthorized access

s700800 11.04 Virtualvault 4.7 TGP update : Potential Apache HTTP server vulnerabilities have been reported: CVE-2003-0545 CVE-2003-0543 CVE-2003-0544 CERT VU935264 CERT VU255484 CERT VU255484 CERT VU686224 CERT VU732952 CERT VU104280 http://www.openssl.org/news/secadv/20030930.txt. %NASLMINLEVEL...

HP-UX PHSS_29891 : HPSBUX0310-284 SSRT3622 rev.3 HP-UX Apache HTTP Server Denial of Service,unauthorized access

s700800 11.04 Virtualvault 4.6 TGP update : Potential Apache HTTP server vulnerabilities have been reported: CVE-2003-0545 CVE-2003-0543 CVE-2003-0544 CERT VU935264 CERT VU255484 CERT VU255484 CERT VU686224 CERT VU732952 CERT VU104280 http://www.openssl.org/news/secadv/20030930.txt. %NASLMINLEVEL...

HP-UX PHSS_30056 : s700_800 11.04 Virtualvault 4.7 OWS update

s700800 11.04 Virtualvault 4.7 OWS update : The remote HP-UX host is affected by multiple vulnerabilities : - Potential Apache HTTP server vulnerabilities have been reported: CVE-2003-0545 CVE-2003-0543 CVE-2003-0544 CERT VU935264 CERT VU255484 CERT VU255484 CERT VU686224 CERT VU732952 CERT...

HP-UX PHSS_29691 : HPSBUX0310-284 SSRT3622 rev.3 HP-UX Apache HTTP Server Denial of Service,unauthorized access

s700800 11.04 Virtualvault 4.6 OWS update : Potential Apache HTTP server vulnerabilities have been reported: CVE-2003-0545 CVE-2003-0543 CVE-2003-0544 CERT VU935264 CERT VU255484 CERT VU255484 CERT VU686224 CERT VU732952 CERT VU104280 http://www.openssl.org/news/secadv/20030930.txt. %NASLMINLEVEL...

CVE-2005-0738

CVE-2005-0738 affects Microsoft Exchange Server 2003 SP1. The vulnerability is a stack consumption issue in the Information Store (Store.exe) caused by processing folders with deeply nested subfolders, leading to a denial-of-service (hang) due to a large number of recursive calls. This is the exp...

CVE-2003-1128

XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086...

CVE-2003-1117

CVE-2003-1117 affects RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x. The issue is a buffer overflow in URL error handling, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The published CVSS vector indicates NETWORK access, low attack c...

CVE-2003-1128

CVE-2003-1128 describes a remote command execution vulnerability in XMMS.pm used by X2 XMMS Remote. An attacker can pass shell metacharacters in a request to TCP port 8086, enabling arbitrary commands execution on the affected system. The public records explicitly identify the vulnerable componen...

CVE-2003-1121

CVE-2003-1121 affects ScriptLogic 4.01 and possibly earlier than 4.14. The vulnerability arises because the ScriptLogic RPC service (SLRPC) and RunAdmin components (SLRAserver.exe/SLRAclient.exe) process client requests at elevated privileges, allowing remote attackers to modify arbitrary registr...

CVE-2003-1119

SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets...

CVE-2003-1117

Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2003-1123

Sun Java Runtime Environment JRE and SDK 1.4.001 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model...

CVE-2003-1123

The vulnerability affects Sun Java Runtime Environment (JRE) and SDK versions 1.4.0_01 and earlier. It allows untrusted applets to access certain information within trusted applets, effectively bypassing the Java security model’s restrictions and enabling information disclosure. No explicit explo...

CVE-2003-1118

CVE-2003-1118 describes a buffer overflow in the SETI@home client (3.03 and other versions) that allows a remote attacker to cause a denial of service (client crash) and execute arbitrary code. The attack relies on a spoofed server response containing a long string followed by a newline character...