AIX 5.2 TL 10 : bos.net.tcp.client (U812065)

The remote host is missing AIX PTF U812065, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812065. The text itself is copyright C...

AIX 5.3 TL 5 / 5.3 TL 6 : sysmgt.websm.rte (U810485)

The remote host is missing AIX PTF U810485, which is related to the security of the package sysmgt.websm.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U810485. The text itself is copyright C...

Fixed XSS vulnerability at www.eplus-unternehmen.de

Security researcher Hanno Boeck, has submitted on 12/03/2007 a cross-site-scripting XSS vulnerability affecting www.eplus-unternehmen.de, which at the time of submission ranked 314818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. ...

AIX 530005 : U810473

The remote host is missing AIX PTF U810473 which is related to the security of the package bos.mp64 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.3 TL 6 : bos.net.tcp.client (U812719)

The remote host is missing AIX PTF U812719, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812719. The text itself is copyright C...

AIX 5.2 TL 10 : bos.rte.printers (U809751)

The remote host is missing AIX PTF U809751, which is related to the security of the package bos.rte.printers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U809751. The text itself is copyright C...

AIX 5.2 TL 10 : printers.rte (U814071)

The remote host is missing AIX PTF U814071, which is related to the security of the package printers.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U814071. The text itself is copyright C...

RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow

This module exploits a stack buffer overflow in RealOne Player V2 Gold Build 6.0.11.853 and RealPlayer 10.5 Build 6.0.12.1483. By sending an overly long string to the "Import" method, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/downlo...

[slackware-security] rsync

New rsync packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found here: https://vulners.com/cve/CVE-2007-4091 http://lists.samba.org/archive/rsync-announce/2007/000050.html Here are the detai...

Unfixed XSS vulnerability at capricorn.anf.unf.edu

Security researcher Codes, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting capricorn.anf.unf.edu, which at the time of submission ranked 98113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Unfixed XSS vulnerability at www.mcgeorge.edu

Security researcher Codes, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.mcgeorge.edu, which at the time of submission ranked 647380 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is currentl...

Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000)

Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...

CVE-2007-5502

CVE-2007-5502 affects the OpenSSL FIPS Object Module 1.1.1. The PRNG does not auto-seed during the FIPS self-test, causing generated data to be more predictable and potentially enabling attackers to bypass protections relying on randomness. This vulnerability is documented across multiple sources...

CVE-2007-6201

The vulnerability CVE-2007-6201 affects Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12, where a flaw in a “faulty add-on” and related to the turn_cmd option allows a denial of service (hang) and potentially execution of other commands via unknown vectors. The connected documents confirm affec...

CVE-2007-5742

CVE-2007-5742 is a directory-traversal vulnerability in the Wesnoth WML engine preprocessor affecting Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12. The issue allows remote attackers to read arbitrary files via directory traversal sequences (".."), as described in the initial advisory. The v...

CVE-2007-6202

CVE-2007-6202 exposes a SQL injection in Neocrome Seditio CMS (plugins/search/search.php, via plug.php) on version 121 and earlier. The vulnerability arises from unsanitized input to the pag_sub parameter used in database queries when magic_quotes_gpc is disabled, allowing remote attackers to man...

CVE-2007-6196

CVE-2007-6196 – Calacode @Mail prior to 5.2 : A cross-site scripting (XSS) vulnerability exists in util.php where an attacker can inject arbitrary script/HTML via the func parameter. The issue is documented in multiple sources (e.g., NVD) with a base score of 4.3 (Medium) and an attack vector ove...

CVE-2007-6200

CVE-2007-6200 affects rsync prior to 3.0.0pre6. When running a writable rsync daemon, it allows remote attackers to bypass exclude, exclude_from, and filter options and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and (4) dest options. The initial documents do not ...

CVE-2007-6197

The CVE-2007-6197 entry affects BEA AquaLogic Interaction Plumtree Portal 5.0.2–5.0.4 and 6.0.1.218452. The root cause is information disclosure via comments in the HTML source of any page, allowing remote attackers to learn version numbers and internal hostnames. Impact is partial confidentialit...

CVE-2007-6199

CVE-2007-6199 affects rsync before 3.0.0pre6 where a writable rsync daemon not using chroot can be tricked into creating a symlink outside the module hierarchy, allowing remote access to restricted files. Available connected documents confirm the vulnerability details and note fixes in rsync upda...