Sun Network Security Services (NSS) vulnerable to DoS due to an unspecified vulnerability

Overview The NSS libraries used in the Sun One Application Server and the Sun Java System web server contain an unspecified vulnerability that may allow an attacker to create a denial-of-service condition. Description The Sun One Application Server provides a Java 2 Platform for delivering Java...

postgresql, rh security update

CentOS Errata and Security Advisory CESA-2007:0064 Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

CVE-2006-6972

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...

CVE-2006-6973

CVE-2006-6973 affects Headstart Solutions DeskPRO. The vulnerability allows remote attackers to bypass authentication for administrative paths, enabling (1) reinstall via install/index.php, (2) database deletion via a crafted do=delete_database query on a renamed install/index.php, and (3)/(4) un...

CVE-2006-6974

Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 list files in the includes/ directory; obtain the SQL username and password via a direct request for 2 config.php and 3 config.php.bak in includes/; rea...

CVE-2006-6974

The CVE-2006-6974 entry concerns Headstart Solutions DeskPRO, where sensitive data is stored under the web root with insufficient access control. According to the sources, an attacker can directly request various files in includes/ (config.php, config.php.bak, and other includes/), read files in ...

CVE-2006-6972

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...

CVE-2006-6972

CVE-2006-6972 involves a SQL injection in torrents.php of BtitTracker (version 1.3.2 and earlier). The vulnerability arises when the (1) by and (2) order parameters are unsafely processed, enabling remote attackers to craft SQL commands that may be executed by the database. Affected software: Bti...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix several security vulnerabilities are now available for the Red Hat Application Stack. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. A flaw...

Cross site scripting

Cross-site scripting XSS vulnerability in imagesarchive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the s parameter. NOTE: the thumbnails.asp vector is already covered by CVE-2006-3023...

CVE-2006-6970

CVE-2006-6970 : Opera 9.10 Final can bypass Fraud Protection by appending certain characters (e.g., "." or "/") to the end of a domain, which escapes the blacklist filter. The NVD notes a remote-network vulnerability with low exploit complexity and partial confidentiality impact (no integrity or ...

CVE-2006-6969

Jetty (versions: before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, 6.1 before 6.1.0pre3) uses java.util.Random to generate session IDs. This leads to predictable session identifiers that remote attackers could brute-force to guess sessions, potentially bypass authentication and enable cross-sit...

CVE-2006-6971

Mozilla Firefox 2.0 (Windows) vulnerability: phishing-protection can be bypassed by representing an IP address in formats such as dotted-hex, dotted-octal, decimal, hex, or octal, which evade the blacklist filter. Root cause is parsing/format handling that fails to normalize these IP representati...

Symantec Veritas NetBackup CONNECT_OPTIONS Request Buffer Overflow (CVE-2006-5822)

Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. The vulnerability is due to a boundary error in the NetBackup service. An attacker can exploit this issue by sending a...

CA Products Discovery Service Remote Buffer Overflow (CVE-2006-6379)

Computer Associates CA BrightStor ARCserve Backup and Business Protection Suite provide data protection and integrated backup and recovery solution for Windows, NetWare, Linux and UNIX environments. The vulnerability is due to a flaw in the Discovery Service component of the affected products. An...

CVE-2006-1167

CVE-2006-1167 affects SGI ProPack 3 SP6 kernel. The vulnerability allows local users to view the frame buffer contents of the last session after reboot, enabling partial disclosure of sensitive information. The NVD entry lists a local attack vector with high complexity and no authentication, but ...

CVE-2006-6968

CVE-2006-6968 describes a cross-site scripting (XSS) vulnerability in the group moderation control center page of Phorum prior to 5.1.19. The affected component is the group moderation control center page, with the underlying cause being an XSS flaw that could allow remote attackers to inject arb...

avast! Server Edition LHA Archive Extended-header Field Processing Overflow

The remote host is running avast! Server Edition. The installed version of avast! Server Edition is reportedly prone to a heap overflow when processing LHA archives with long filename and directory-name extended-header fields. An attacker may be able to exploit this issue to execute arbitrary cod...

Remote file inclusion

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...