ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service

Title: ntop = 3.3.10 Basic Authentication Null Pointer Denial of Service --------------------------------------------------------------------------------- Vendor: ntop Vendor URL: www.ntop.org Vendor Response: None Description: A denial of service condition can be reached by specifying an invalid...

ntop 3.3.10 Denial Of Service

Title: ntop = sizeoftheHttpUser usersizeoftheHttpUser-1 = '\0'; . . . Affected Operating Systems: Only tested on Linux Affected Versions: ntop = 3.3.10 CVE: CVE-2009-2732 Credit: Brad Antoniewicz [email protected] code: START modules/auxiliary/dos/http/ntopbasic.rb...

CVE-2008-2732

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance ASA 5500 devices 7.0 before 7.0716, 7.1 before 7.1271, 7.2 before 7.247, 8.0 before 8.0320, and 8.1 before 8.118 allow remote attackers to cause a denial of service device reload...

CVE-2008-2732

CVE-2008-2732 covers multiple erroneous SIP processing vulnerabilities in Cisco PIX and ASA (5500 series) that may cause device reloads via SIP inspection. Affected software versions include Cisco PIX/ASA releases prior to 7.0(7)16, 7.1 prior to 7.1(2)71, 7.2 prior to 7.2(4)7, 8.0 prior to 8.0(3)...

CVE-2004-2732

The vulnerability CVE-2004-2732 affects nbmember.cgi in Netbilling 2.0, where a remote attacker can disclose sensitive information via the cmd=test option to determine the access key. Documents confirm the flaw is an information-disclosure issue with network access and no authentication requireme...

CVE-2007-2732

CVE-2007-2732 describes multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS. Remote attackers can inject arbitrary web script or HTML via the (1) path parameter to view/search/ and (2) through parameters in view/supplynews/ such as companyname, country, email, firstname, middlename,...

CVE-2006-2732

The CVE-2006-2732 entry concerns a SQL injection vulnerability in Mini-Nuke 2.3 and earlier, specifically in Your_Account.asp. The underlying issue is that the parameters yas_1, yas_2, and yas_3 can be manipulated to inject arbitrary SQL, enabling remote command execution on affected installation...

Cross site scripting

Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the config parameter. NOTE: this might be the same core issue as CVE-2005-2732...

CVE-2005-2732

AWStats is the affected software in related entries. Connected documents describe an XSS issue in awstats.pl affecting AWStats 6.5 and earlier, exploitable via the config parameter, and note it may be the same core issue as CVE-2005-2732. No explicit versioned remediation or fixes are provided in...

Novell NetWare Management Portal Information Disclosure

Binary data 2732.prm...

CVE-2004-2732

nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key...

Netbilling nbmember.cgi cmd Parameter Information Disclosure

nbmember.cgi is installed on the remote host. The remote version of this software is vulnerable to an information disclosure flaw which may allow an attacker to access sensitive system information resulting in a loss of confidentiality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...