HP-UX PHSS_31828 : s700_800 11.04 Virtualvault 4.5 OWS update

s700800 11.04 Virtualvault 4.5 OWS update : The ssllog function in modssl contains a flaw in versions prior to 2.8.19 that may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

CVE-2004-1693

CVE-2004-1693 affects Mambo 4.5 (1.0.9) via Function.php. The vulnerability arises from a PHP remote file inclusion: by setting mosConfig_absolute_path to reference a URL on a remote server that contains code, an attacker can execute arbitrary PHP on the affected system. This is a remote code exe...

CVE-2004-1692

CVE-2004-1692 describes a cross‑site scripting (XSS) vulnerability in the Mambo 4.5 (1.0.9) index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the (1) Itemid, (2) mosmsg, or (3) limit parameters. The issue is documented with a CVSS v2 base ...

CVE-2004-1692

Cross-site scripting XSS vulnerability in index.php in Mambo 4.5 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the 1 Itemid, 2 mosmsg, or 3 limit parameters...

HP-UX PHSS_24823 : HPSBUX0110-173 Sec. Vulnerability in Tomcat 3.2.1 (VVOS) (rev.1)

s700800 11.04 VirtualVault 4.5 Tomcat Update : Security Vulnerability in Tomcat 3.2.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS24823. The text itself is copyright C Hewlett-Packard Development...

CVE-2005-0224

Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic...

CVE-2004-1326

Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter...

CVE-2004-1326

Technical details about CVE-2004-1326 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

Exploit for Ultrix 4.5 dxterm

Well, I hadn't seen a buffer overflow exploit for ultrix on bugtraq, so I decided to make one. I don't think anyone is using ultrix seriously anymore, so this is just for fun ;. -- cut here -- / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' i...

CVE-2004-1326

Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter...

Ultrix 4.5/MIPS dxterm Local Buffer Overflow Exploit

Exploit for ultrix platform in category local exploits ==================================================== Ultrix 4.5/MIPS dxterm Local Buffer Overflow Exploit ==================================================== / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't...

Ultrix 4.5/MIPS - dxterm 0 Local Buffer Overflow

/ Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' in the shellcode. Probably dxterm only copies everything after the last slash, as it expects a path. Since everything is pretty much hardcoded, you will probably have to tweak it for versions...

CVE-2004-1692

Cross-site scripting XSS vulnerability in index.php in Mambo 4.5 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the 1 Itemid, 2 mosmsg, or 3 limit parameters...

CVE-2004-1693

PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 1.0.9 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code...

Mambo 4.5 - Multiple Vulnerabilities

Mambo 4.5 - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source...

Mambo 4.5 Server - 'user.php' Script Unauthorized Access

source: https://www.securityfocus.com/bid/9193/info It has been reported that Mambo Server may be prone to an unauthorized access vulnerability that may allow an attacker to modify a user and/or an administrator's information such as password, email, name etc, after supplying a legitimate user id...

CVE-2002-0794

Technical details are not publicly available in the provided documents; monitor for updates on CVE-2002-0794 for any concrete affected versions, impact, or remediation.

CVE-2002-0414

Affected software: KAME-derived IPsec implementations on NetBSD 1.5.2, FreeBSD 4.5, and other OSes. Vulnerability: the implementation does not properly consult the Security Policy Database (SPD), which can allow a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to for...

CVE-2002-0877

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. dot dot in the 1 LIST ls or 2 GET commands...

CVE-2002-0876

Web server for Shambala 4.5 allows remote attackers to cause a denial of service crash via a malformed HTTP request...