HP-UX PHSS_31240 : HP-UX Running System Administration Manager (SAM), Local Elevation of Privilege (HPSBUX01104 SSRT4699 rev.3)

s700800 11.11 ObAM Cumulative Patch : A potential security vulnerability has been identified with System Administration Manager SAM running on HP-UX that may allow local unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

HP-UX PHNE_23950 : HP-UX Running ftp and ftpd, Remote Unauthorized Access (HPSBUX00162 SSRT4883 rev.4)

s700800 11.11 ftpd1M patch : ftpd and ftp incorrectly manage buffers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE23950. The text itself is copyright C Hewlett-Packard Development Company, L.P...

HP-UX PHSS_29338 : HP-UX SharedX, Local Unauthorized Access or Denial of Service (DoS) (HPSBUX00307 SSRT3476 rev.2)

s700800 11.X WTSharedX Periodic Patch : SharedX accesses files in a potentially insecure manner. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29338. The text itself is copyright C Hewlett-Packard...

HP-UX PHSS_30669 : HP-UX running CDE dtlogin, Remote Unauthorized Privileged Access, Denial of Service (DoS) (HPSBUX01038 SSRT4721 rev.2)

s700800 11.11 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running CDE dtlogin software, where the potential vulnerability may be exploited locally or remotely to allow unauthorized privileged access or a Denial of Service DoS. %NASLMINLEVEL 70300 C...

HP-UX PHSS_30807 : HP-UX running CDE dtlogin, Remote Unauthorized Privileged Access, Denial of Service (DoS) (HPSBUX01038 SSRT4721 rev.2)

s700800 11.04 VVOS CDE Runtime Patch : A potential security vulnerability has been identified with HP-UX running CDE dtlogin software, where the potential vulnerability may be exploited locally or remotely to allow unauthorized privileged access or a Denial of Service DoS. %NASLMINLEVEL 70300 C...

CVE-2004-1487

CVE-2004-1487 affects wget 1.8.x and 1.9.x, where a remote server can cause overwriting of local files via a redirect URL containing ".." that resolves to the attacker’s IP, bypassing wget’s ".." filtering. Connected docs confirm this as a vulnerability in redirection URL handling and indicate up...

CVE-2004-1488

CVE-2004-1488 affects wget 1.8.x and 1.9.x, where control characters in HTTP responses were not filtered/quoted when displayed in the terminal. This allowed remote attackers (malicious web servers) to inject terminal escape sequences that could lead to arbitrary code execution in interactive sess...

CVE-2004-1487

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...

CVE-2004-1487

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...

CVE-2004-1488

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code...

GLSA-200501-24 : tnftp: Arbitrary file overwriting

The remote host is affected by the vulnerability described in GLSA-200501-24 tnftp: Arbitrary file overwriting The 'mget' function in cmds.c lacks validation of the filenames that are supplied by the server. Impact : An attacker running an FTP server could supply clients with malicious filenames,...

CVE-2004-1486

Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unkno...

CVE-2004-0851

CVE-2004-0851 affects Net-Acct before version 0.71, where write_list and dump_curr_list could allow local users to overwrite arbitrary files via insecure temporary file handling (symlink attack). Mitigation: Debian fixed in DSA-559-1, upgrading net-acct to 0.71-5woody1 (and 0.71-7 for sid) is rec...

CVE-2004-1465

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line...

CVE-2004-1449

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a wrapper line...

CVE-2004-1478

JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session...

CVE-2004-1454

Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First OSPF enabled, allows remote attackers to cause a denial of service device reload via a malformed OSPF packet...

CVE-2004-1457

The Virtual Private Network VPN capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service ABEND in IKE.NLM via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite...