1405 matches found
AIX 5.1 : IY23041
The remote host is missing AIX Critical Security Patch number IY23041 SECURITY: buffer overflows in lpd. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 5.1 : IY64356
The remote host is missing AIX Critical Security Patch number IY64356 SECURITY: POSSIBLE SECURITY EXPOSURE IN CHCOD COMMAND. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 5.1 : IY28408
The remote host is missing AIX Critical Security Patch number IY28408 SECURITY: Buffer overflow vulnerability in traceroute. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 5.1 : IY23847
The remote host is missing AIX Critical Security Patch number IY23847 SECURITY: Buffer overflow security vulnerability in muxatmd. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 5.1 : IY23846
The remote host is missing AIX Critical Security Patch number IY23846 SECURITY: Format string vulnerability in CDE ToolTalk server. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 5.1 : IY26221
The remote host is missing AIX Critical Security Patch number IY26221 SECURITY: Multiple buffer overflow vulnerabilities in tsmlogin. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
CVE-2006-4644
The CVE-2006-4644 vulnerability affects the phpFullAnnu CMS (versions 5.1 and earlier). A remote file inclusion flaw exists in the repmod parameter of modules/home.module.php, allowing an attacker to supply a URL that causes the system to execute arbitrary PHP code on the affected server. The iss...
PHProjekt <= 5.1 Multiple Remote File Inclusions
The remote host is running PHProjekt, an open source groupware suite written in PHP. The version of PHProjekt installed on the remote host fails to sanitize user-supplied input to the 'pathpre' parameter of the 'lib/specialdays.php' script as well as the 'libpath' parameter of the...
CVE-2006-4204
Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathpre parameter in lib/specialdays.php and the 2 libpath parameter in lib/dbmanfilter.inc.php...
CVE-2006-4189
Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 index.php, 2 aemodule.php, 3 browse.php, 4 cc.php, 5 click.php, 6 faq.php, 7 gallery.php, 8 im.php, 9 inbox.php, 10 joinform.php, 11...
CVE-2006-4189
Summary: BoonEx Dolphin 5.1 (and Dolphin 5.2 per related CVEs) is affected by PHP remote file inclusion via dir[inc] parameters in multiple scripts (e.g., index.php, aemodule.php, browse.php, cc.php, etc.). The underlying issue is improper inclusion of user-supplied URL input, enabling remote cod...
CVE-2006-4189
Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 index.php, 2 aemodule.php, 3 browse.php, 4 cc.php, 5 click.php, 6 faq.php, 7 gallery.php, 8 im.php, 9 inbox.php, 10 joinform.php, 11...
PHProjekt 5.1 - Multiple Remote File Inclusions
/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Script name: PHProjekt v. 5.1 - Script site: http://www.phprojekt.com/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or - http://www.devilteam.yum.pl + + + - Greetz: DragonHeart - and all DEVIL TEAM Members :- + + + ...
ASP.DLL Include File Buffer Overflow
======================================================================== = ASP.DLL Include File Buffer Overflow = = MS Bulletin posted: = http://www.microsoft.com/technet/security/Bulletin/MS06-034.mspx = = Affected Software: = IIS 5.0 = IIS 5.1 = IIS 6.0 = = Public disclosure on July 19, 2006...
CVE-2006-3567
CVE-2006-3567 describes an XSS vulnerability in the web administration interface logging feature of Juniper Networks (Redline) DX 5.1.x (and possibly earlier). The issue allows remote attackers to inject arbitrary web script or HTML via the username login field. Affected component is the web admi...
Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability
Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability July 10, 2006 Product Overview: The Juniper Networks Redline DX application acceleration platform delivers a complete data center acceleration solution for web-enabled and IP-based business applications. Vulnerability...
Design/Logic Flaw
rmmlcachefile in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
Immunity Canvas: MS06_014
Name| ms06014 ---|--- CVE| CVE-2006-0003 Exploit Pack| CANVAS Description| RDS Datastore MS06-014 Notes| CVE Name: CVE-2006-0003 VENDOR: Microsoft MSADV: MS06-014 Repeatability: Infinite client side - no crash MSRC: http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx CVE Url:...
PHP 4.x/5.0/5.1 - 'mb_send_mail()' Restriction Bypass
source: https://www.securityfocus.com/bid/16878/info PHP is prone to multiple input-validation vulnerabilities that could allow 'safemode' and 'openbasedir' security settings to be bypassed. These issues reside in the 'mbsendmail' function, the 'mail' function, and various PHP IMAP functions...
Directory traversal
Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in 1 ZipStar 5.1 and 2 SpeedCommander 11.01.4450, allows remote attackers to overwrite arbitrary files via unspecified manipulations in a 1 JAR or 2 ZIP archive...