CVE-2004-1540

CVE-2004-1540 affects ZyXEL Prestige routers (623, 650, 652) where HTTP Remote Administration is enabled. The vulnerability exists because access to the page “/rpFWUpload.html” does not require authentication, enabling a remote attacker to reset the router configuration to its factory state. Docu...

CVE-2004-1538

CVE-2004-1538 describes a SQL injection in PHP-Kit’s include.php affecting PHP-Kit versions 1.6.03 through 1.6.1, where an attacker can manipulate the id parameter to execute arbitrary SQL commands. This is a remote vulnerability with network attack vector and partial impact on confidentiality, i...

CVE-2004-1541

CVE-2004-1541 affects VanDyke SecureCRT for Windows (notably 4.0 and 4.1; likely others) where a telnet:// URL using the /F option to specify a configuration file on a Samba share can cause arbitrary command execution. Root cause: insecure handling of telnet URL/remote configuration folder refere...

CVE-2004-1528

The CVE-2004-1528 issue affects the Event Calendar module 2.13 for PHP-Nuke. It allows remote attackers to disclose sensitive information by triggering errors in HTTP requests to config.php, index.php, or submit.php, revealing the full path in an error message. The documentation does not specify ...

RHEL 3 : cups (RHSA-2005:132)

Updated cups packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS is a print spooler. During a source code audit, Chris Evans discovered a number of integer...

CVE-2004-1491

CVE-2004-1491 affects Opera 7.54 and earlier. The vulnerability arises because Opera uses kfmclient exec to handle unknown MIME types, allowing a remote attacker to execute arbitrary code via a shortcut or launcher containing an Exec entry. Public documents confirm this as a real issue across mul...

CVE-2004-1491

Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry...

CVE-2004-1490

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces ASCII character code 160 in the 1 Content-Disposition or 2 Content-Type headers...

CVE-2004-1490

CVE-2004-1490 affects Opera 7.54 and earlier. The issue: remote attackers can spoof file types shown in the download dialog by manipulating the Content-Disposition or Content-Type headers using dots and non-breaking spaces (ASCII 160). Impact described in sources includes confusion or verificatio...

HP-UX PHCO_28125 : HP-UX Running System Administration Manager (SAM), Local Elevation of Privilege (HPSBUX01104 SSRT4699 rev.3)

s700800 11.00 cumulative SAM/ObAM patch : A potential security vulnerability has been identified with System Administration Manager SAM running on HP-UX that may allow local unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

HP-UX PHSS_31988 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)

s700800 11.11 X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

HP-UX PHCO_26385 : HP-UX Running newgrp(1), Local Privilege Elevation (HPSBUX01102 SSRT4687 rev.2)

s700800 11.11 newgrp1 cumulative patch : A potential vulnerability has been identified with the HP-UX newgrp1 command that may allow authorized users to elevate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted fro...

HP-UX PHCO_29682 : HP-UX Running newgrp(1), Local Privilege Elevation (HPSBUX01102 SSRT4687 rev.2)

s700800 11.00 cumulative newgrp1 patch : A potential vulnerability has been identified with the HP-UX newgrp1 command that may allow authorized users to elevate privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted fro...

HP-UX PHSS_31990 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)

s700800 11.23 X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

HP-UX PHSS_29550 : HP-UX SharedX, Local Unauthorized Access or Denial of Service (DoS) (HPSBUX00307 SSRT3476 rev.2)

s700800 11.22 WTSharedX Periodic Patch : SharedX accesses files in a potentially insecure manner. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29550. The text itself is copyright C Hewlett-Packard...

HP-UX PHSS_31068 : HP-UX Running Serviceguard, Remote Increase in Privilege (HPSBUX01080 SSRT3526 rev.2)

s700800 11.23 MC/ServiceGuard A.11.15.00 : A potential security vulnerability has been identified with HP Serviceguard running on HP-UX and Linux that may allow remote unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugi...

HP-UX PHNE_30905 : HP-UX Running ARPA Transport, Local Denial of Service (DoS) (HPSBUX01054 SSRT3552 rev.2)

s700800 11.04 VVOS cumulative ARPA Transport patch : A potential vulnerability has been identified in the HP-UX ARPA Transport which could be exploited by a local user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in...

HP-UX PHNE_29473 : HP-UX Running ARPA Transport, Local Denial of Service (DoS) (HPSBUX01054 SSRT3552 rev.2)

s700800 11.00 cumulative ARPA Transport patch : A potential vulnerability has been identified in the HP-UX ARPA Transport which could be exploited by a local user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

HP-UX PHSS_30668 : HP-UX running CDE dtlogin, Remote Unauthorized Privileged Access, Denial of Service (DoS) (HPSBUX01038 SSRT4721 rev.2)

s700800 11.00 CDE Runtime Patch : A potential security vulnerability has been identified with HP-UX running CDE dtlogin software, where the potential vulnerability may be exploited locally or remotely to allow unauthorized privileged access or a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenabl...

HP-UX PHSS_31243 : HP-UX Running System Administration Manager (SAM), Local Elevation of Privilege (HPSBUX01104 SSRT4699 rev.3)

s700800 11.22 ObAM Patch : A potential security vulnerability has been identified with System Administration Manager SAM running on HP-UX that may allow local unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...