CVE-2004-2540

CVE-2004-2540 describes a deserialization vulnerability in readObject for Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.0 through 1.4.2_05. Reported impact is a denial of service where crafted serialized data can cause the JVM to become unresponsive. The known aff...

RHEL 2.1 : php (RHSA-2005:838)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. ...

RHEL 2.1 : openssl (RHSA-2005:829)

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit implements Secure Sockets Layer SSL v2/v3,...

openssl, openssl095a, openssl096 security update

CentOS Errata and Security Advisory CESA-2005:829-00 The OpenSSL toolkit implements Secure Sockets Layer SSL v2/v3, Transport Layer Security TLS v1 protocols, and serves as a full-strength general purpose cryptography library. Testing performed by the OpenSSL group using the Codenomicon TLS Test...

IPSwitch WhatsUp Small Business 2004 Report Service - Directory Traversal

IPSwitch WhatsUp Small Business 2004 Report Service - Directory Traversal source: https://www.securityfocus.com/bid/15291/info IPSwitch WhatsUp Small Business 2004 is prone to a directory traversal vulnerability. Successful exploitation could allow a remote attacker to gain access to files outsid...

cgi.rb

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU ressources. Warning : OpenVAS solely relied on the presence of this CGI, it did not...

Xedus directory traversal

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to directory traversal. An attacker could send specially crafted URL to view arbitrary files on the system. OpenVAS Vulnerability Test $Id: xedusdirtraversal.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: Xedus...

CVSTrac timeline.c timeline_page function overflow

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the timelinepage function in timeline.c that may allow an attacker to cause a buffer overflow. An attacker, exploiting this flaw, would be potentially able t...

Music Daemon Denial of Service

It is possible to cause the Music Daemon to stop responding to requests by causing it to load the /dev/random filename as its track list. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

WebLibs File Disclosure Vulnerability (Dec 2004) - Active Check

WebLibs is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linksys Wireless Internet Camera File Disclosure

The Linksys Wireless Internet Camera contains a CGI that allows remote attackers to disclosue sensitive files stored on the server. An attacker may use this CGI to disclosue the password file and from it the password used by the root use the MD5 value. OpenVAS Vulnerability Test $Id:...

Sun Java Runtime Environment < 1.4.2_04 DoS Vulnerability

The remote Windows machine is running a Java SDK or JRE version 1.4.203 and prior which is vulnerable to a DoS attack. SPDX-FileCopyrightText: 2004 Netteksecure Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVSTrac < 1.1.4 Malformed URI Infinite Loop DoS Vulnerability

CVSTrac is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cvstrac:cvstrac";...

thttpd Directory Traversal Vulnerability (CVE-2004-2628) - Windows

The remote web server is vulnerable to a path traversal vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BEA WebLogic Operator/Admin Password Disclosure Vulnerability

BEA WebLogic Server and WebLogic Express are prone to a vulnerability that may result in the disclosure of Operator or Admin passwords. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft DirectPlay DoS Vulnerability (839643)

A denial of service DoS vulnerability exists in the implementation of the IDirectPlay4 application programming interface API of Microsoft DirectPlay because of a lack of robust packet validation. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced...

CVSTrac filediff vulnerability

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of filediff has a flaw in the input sanitation which, when exploited, can lead to a remote attacker executing arbitrary commands on the system. OpenVAS has determined the vulnerability...

Subversion < 1.0.6 Module File Restriction Bypass

Subversion is prone to a flaw Apache module modauthzsvn. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Jetty < 4.2.19 Denial of Service

The remote host is running a version of Jetty which is older than 4.2.19. The version is vulnerable to a unspecified denial of service. OpenVAS Vulnerability Test $Id: jetty419dos.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jetty Fixes by Tenable: - added CVE and OSVDB xrefs. Copyright:...

CVS file existence information disclosure weakness

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...