Debian DLA-220-1 : dpkg security update

Jann Horn discovered that the source package integrity verification in dpkg-source can be bypassed via a specially crafted Debian source control file .dsc. Note that this flaw only affects extraction of local Debian source packages via dpkg-source but not the installation of packages from the...

RhinoSoft Serv-U FTP Server 7.2.0.1 'rnto' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31563/info RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrar...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts via a crafted request to admin/accesscontroluseradd.php; 2...

CVE-2013-6922

CVE-2013-6922 concerns Seagate BlackArmor NAS sg2000-2000.1331. Multiple CSRF vulnerabilities allow an attacker to hijack administrator authentication and perform dangerous actions via crafted requests to admin/access_control_user_add.php and related endpoints. Affected device: BlackArmor NAS sg2...

PT-2014-3217

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS 220 version sg2000-2000.1331 Description The issue affects the Seagate BlackArmor NAS 220 devices, allowing remote attackers to hijack the authentication of administrators. This can be achieved through multiple cross-sit...

CVE-2013-6922: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts via a crafted request to admin/accesscontroluseradd.php; 2...

CVE-2013-6923

The CVE-2013-6923 issue affects Seagate BlackArmor NAS sg2000-2000 with firmware sg2000-2000.1331. It describes two persistent XSS risks: (1) fullname input in admin/access_control_user_edit.php and (2) workname input in admin/network_workgroup_domain.php. The root cause is failure to sanitize us...

PT-2014-3218

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS 220 version sg2000-2000.1331 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the fullna...

CVE-2013-6923: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or HTML via the 1 fullname parameter to admin/accesscontroluseredit.php or 2 workname parameter to...

MS13-069: Cumulative Security Update for Internet Explorer (2870699)

The remote host is missing Internet Explorer IE Security Update 2870699. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6982...

В США задержаны 11 хакеров из России

Они входили в преступную группу, похитившую из американских банков 3 млн долларов Дмитрий ГОНЧАРУК, Никита КРАСНИКОВ — 05.10.2010 Еще шесть граждан России были задержаны в США по обвинению в причастности к команде мошенников, которая воровала деньги с банковских счетов. Гражданство других девяти...

Mandriva Update for davfs MDVSA-2009:220-1 (davfs)

Check for the Version of davfs OpenVAS Vulnerability Test Mandriva Update for davfs MDVSA-2009:220-1 davfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Buffer overflow

Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service application crash or execute arbitrary code via a long 220 reply aka connection greeting or welcome message...

CVE-2009-3976: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service application crash or execute arbitrary code via a long 220 reply aka connection greeting or welcome message...

Mandrake Security Advisory MDVSA-2009:220 (davfs)

The remote host is missing an update to davfs announced via advisory MDVSA-2009:220. OpenVAS Vulnerability Test $Id: mdksa2009220.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:220 davfs Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CoolPlayer m3u playlist processing filename buffer overflow

Added: 08/13/2008 CVE: CVE-2008-3408 BID: 30418 OSVDB: 47194 Background CoolPlayer is a free audio player for Windows platforms. Problem A buffer overflow vulnerability in CoolPlayer allows command execution when a user opens an m3u playlist file containing a specially crafted filename. Resolutio...

Unfixed XSS vulnerability at www.220.ro

Security researcher Dr.Optix, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.220.ro, which at the time of submission ranked 10779 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currently...

Ubuntu 4.10 / 5.04 / 5.10 : w3c-libwww vulnerability (USN-220-1)

Sam Varshavchik discovered several buffer overflows in the HTBoundaryputblock function. By sending specially crafted HTTP multipart/byteranges MIME messages, a malicious HTTP server could trigger an out of bounds memory access in the libwww library, which causes the program that uses the library ...

CVE-2002-2026: Undefined Security Weakness

Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply...

Debian DSA-220-1 : squirrelmail - XSS

A cross site scripting vulnerability has been discovered in squirrelmail, a feature-rich webmail package written in PHP4. Squirrelmail doesn't sanitize user provided variables in all places, leaving it vulnerable to a cross site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, In...