[SECURITY] [DSA 2302-1] bcfg2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2302-1 [email protected] http://www.debian.org/security/ Nico Golde Sep 7, 2011 http://www.debian.org/security/faq -...

Debian DSA-2302-1 : bcfg2 - missing input sanitization

It has been discovered that the Bcfg2 server, a configuration management server for Bcfg2 clients, is not properly sanitizing input from Bcfg2 clients before passing it to various shell commands. This enables an attacker in control of a Bcfg2 client to execute arbitrary commands on the server wit...

[SECURITY] [DSA 2302-1] bcfg2 security update

-------------------------------------------------------------------------- Debian Security Advisory DSA-2302-1 [email protected] http://www.debian.org/security/ Nico Golde Sep 7, 2011 http://www.debian.org/security/faq - --------------------------------------------------------------------------...

Rosewill RXS-3211 IP camera information leakage

It's possible to retrieve administration password via UDP/13364 request...

Remote Password Disclosure Vulnerability in RXS-3211 IP Camera + others

-==Description==- The RXS-3211 IP camera, among others, is vulnerable to remote password disclosure, which can be exploited by an unauthenticated attacker with a single UDP packet. The problem exists in the camera management protocol used by the devices, which sends the administrator password and...

RXS-3211 IP Camera - UDP Packet Password Information Disclosure

RXS-3211 IP Camera - UDP Packet Password Information Disclosure source: https://www.securityfocus.com/bid/47976/info The RXS-3211 IP camera is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information...

RXS-3211 IP Camera - UDP Packet Password Information Disclosure

source: https://www.securityfocus.com/bid/47976/info The RXS-3211 IP camera is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information obtained will aid in further attacks. the following proof of conce...

CVE-2010-3211

Summary: CVE-2010-3211 refers to multiple SQL injection vulnerabilities in the Joomla! extension JE FAQ Pro (com_jefaqpro) version 1.5.0. The flaws allow remote attackers to execute arbitrary SQL commands through the categorylist operations, specifically via the catid parameter in category listin...

CVE-2010-3211

Multiple SQL injection vulnerabilities in the JE FAQ Pro comjefaqpro component 1.5.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via category categorylist operations with 1 the catid parameter or 2 the catid parameter in a lists action...

CVE-2010-3211

creationtimestamp| type| source ---|---|--- 2010-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14846...

Authentication flaw

admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211...

CVE-2009-3211

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the optionsstyledir parameter to the default URI...

CVE-2009-3211

CVE-2009-3211 describes a directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x. When magic_quotes_gpc is disabled, remote attackers can read arbitrary files by injecting a .. into the options[style_dir] parameter of the default URI. The NVD entry lists a base score of 6.8 (Medi...

CVE-2008-3211

CVE-2008-3211 affects Scripteen Free Image Hosting Script 1.2 and 1.2.1. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1, enabling unauthorized admin actions. This is a cookie-based auth bypass, with no expl...

CVE-2008-3211

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1...

CVE-2008-3211

creationtimestamp| type| source ---|---|--- 2008-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6070...

CVE-2007-3211

CVE-2007-3211 is a Cross-site scripting vulnerability affecting Domain Technologie Control (DTC) prior to 0.25.9. The issue occurs in 404.php, where input supplied via PATH_INFO (REQUEST_URI) is not properly sanitized, enabling remote attackers to inject arbitrary web script or HTML. Affected pro...

CVE-2006-3211

Cross-site scripting XSS vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter...

CVE-2006-3211

The CVE-2006-3211 issue affects cjGuestbook versions 1.3 and earlier, located in sign.php. It is a cross-site scripting (XSS) vulnerability that lets remote attackers inject JavaScript by using a javascript: URI in an img BBCode tag within the comments parameter. Impact is partial integrity compr...

CVE-2005-3211

Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip,...