Veritas NetBackup Remote Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Veritas NetBackup - Remote Command Execution (Metasploit)

Veritas NetBackup - Remote Command Execution Metasploit $Id: veritasnetbackupcmdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Netbilling nbmember.cgi cmd Parameter Information Disclosure

nbmember.cgi is installed on the remote host. The remote version of this software is vulnerable to an information disclosure flaw which may allow an attacker to access sensitive system information resulting in a loss of confidentiality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Veritas NetBackup - Remote Command Execution (Metasploit)

$Id: veritasnetbackupcmdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RHEL 3 : ImageMagick (RHSA-2004:480)

Updated ImageMagick packages that fix a BMP loader vulnerability are now available. ImageMagickTM is an image display and manipulation tool for the X Window System. A heap overflow flaw has been discovered in the ImageMagick image handler. An attacker could create a carefully crafted BMP file in...

RHEL 2.1 : ImageMagick (RHSA-2004:494)

Updated ImageMagick packages that fix various security vulnerabilities are now available. ImageMagickTM is an image display and manipulation tool for the X Window System. A heap overflow flaw was discovered in the ImageMagick image handler. An attacker could create a carefully crafted BMP file in...

RHEL 2.1 / 3 : squid (RHSA-2004:591)

An updated squid package that fixes a remote denial of service vulnerability is now available. Squid is a full-featured Web proxy cache. iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart t...

CVE-2004-0973

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2004-0960

CVE-2004-0960 affects FreeRADIUS prior to 1.0.1. Malformed USR vendor-specific attributes (VSA) can trigger a memcpy with -1, allowing remote attackers to cause a denial of service (core dump). Affected component is the FreeRADIUS USR VSA handling; the vulnerability leads to availability impact (...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0834

CVE-2004-0834 describes a local;format-string vulnerability in the Speedtouch USB driver prior to version 1.3.1. The flaw affects the driver’s logging calls in modem_run, pppoa2 and pppoa3, allowing a malicious local user to potentially execute arbitrary code with elevated privileges. Affected pr...

CVE-2004-0966

The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0794

Multiple signal handler race conditions in lukemftpd aka tnftpd before 20040810 allow remote authenticated attackers to cause a denial of service or execute arbitrary code...

CVE-2004-0968

CVE-2004-0968 concerns glibc (catchsegv) and related scripts: in glibc 2.3.2 and earlier, local users could cause a symlink attack on temporary files and overwrite them. The issue is documented across multiple advisories (CAN-2004-0968; CAN-2004-1382; CVE-2004-1453) and modules referencing glibc ...

CVE-2004-0961

CVE-2004-0961 concerns FreeRADIUS prior to 1.0.1. The vulnerability is a memory leak allowing remote denial-of-service via a sequence of Access-Request packets containing one of three attributes (Ascend-Send-Secret, Ascend-Recv-Secret, or Tunnel-Password). The connected OpenVAS entries and OSV pa...

CVE-2004-0777

Format string vulnerability in the authdebug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging DEBUGLOGIN is enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0799

The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service server crash via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm"...

CVE-2004-0162

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients...

CVE-2004-0805

Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain 1 mp3 or 2 mp2 file...

CVE-2004-0786

The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service child process crash via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool...