RedHat Update for apr RHSA-2011:0844-01

Check for the Version of apr OpenVAS Vulnerability Test RedHat Update for apr RHSA-2011:0844-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2011-1324: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for...

Oracle AS Portal 10.1.2 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2010-007 - Original release date: August 11th, 2010 - Last revised: May 1st, 2011 - Discovered by: Vicente Aguilera Diaz - Severity: 5.0/10 CVSS Base Scored ============================================= I. VULNERABILIT...

[ISecAuditors Security Advisories] XSS in Oracle AS Portal 10g

============================================= INTERNET SECURITY AUDITORS ALERT 2010-007 - Original release date: August 11th, 2010 - Last revised: May 1st, 2011 - Discovered by: Vicente Aguilera Diaz - Severity: 5.0/10 CVSS Base Scored ============================================= I. VULNERABILIT...

VulnCheck KEV: CVE-2010-0738

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method...

Fedora 15 : quagga-0.99.18-2.fc15 (2011-3990)

Bug 654603 - CVE-2010-1674 quagga: DoS crash by processing malformed extended community attribute in a route - Bug 654614 - CVE-2010-1675 quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes Note that Tenable Network Security has extracted the preceding...

FreeBSD : quagga -- two DoS vulnerabilities (b2a40507-5c88-11e0-9e85-00215af774f0)

Quagga developers report : Quagga 0.99.18 has been released. This release fixes 2 denial of services in bgpd, which can be remotely triggered by malformed AS-Pathlimit or Extended-Community attributes. These issues have been assigned CVE-2010-1674 and CVE-2010-1675. Support for AS-Pathlimit has...

RHEL 6 : quagga (RHSA-2011:0406)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0406 advisory. Quagga is a TCP/IP based routing software suite. The Quagga bgpd daemon implements the BGP Border Gateway Protocol routing protocol. A denia...

quagga: BGP session reset by processing BGP Update message with malformed AS-path attributes

bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service session reset via a malformed ASPATHLIMIT path attribute...

PT-2011-1176

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 0.99.20 Quagga versions prior to 0.99.18 Description The issue affects the quagga package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information...

RedHat Update for seamonkey RHSA-2011:0375-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2011:0375-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for firefox RHSA-2011:0373-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2011:0373-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Windows Capture Keystroke Recorder

This module can be used to capture keystrokes. To capture keystrokes when the session is running as SYSTEM, the MIGRATE option must be enabled and the CAPTURETYPE option should be set to one of Explorer, Winlogon, or a specific PID. To capture the keystrokes of the interactive user, the Explorer...

RedHat Update for Red Hat Enterprise Linux 4.9 kernel RHSA-2011:0263-01

Check for the Version of Red Hat Enterprise Linux 4.9 kernel OpenVAS Vulnerability Test RedHat Update for Red Hat Enterprise Linux 4.9 kernel RHSA-2011:0263-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2010-4506

CVE-2010-4506 concerns Passlogix v-GO Self-Service Password Reset (SSPR) and OEM prior to version 7.0A. The flaw enables physically proximate attackers to run arbitrary programs without authentication by abusing an invalid SSL certificate and using Internet Explorer to navigate the filesystem via...

CVE-2010-4506: Undefined Security Weakness

Passlogix v-GO Self-Service Password Reset SSPR and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save A...

PT-2011-1586

Name of the Vulnerable Software and Affected Versions Passlogix v-GO Self-Service Password Reset SSPR and OEM versions prior to 7.0A Description The issue allows physically proximate attackers to execute arbitrary programs without authentication. This can be achieved by triggering the use of an...

Fedora Update for sudo FEDORA-2011-0455

Check for the Version of sudo OpenVAS Vulnerability Test Fedora Update for sudo FEDORA-2011-0455 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Design/Logic Flaw

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services HTTP-AS is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service memory consumption and HTTP-AS hang by making many connection requests that...

CVE-2010-4594

CVE-2010-4594 affects IBM Lotus Mobile Connect (Connection Manager) before 6.1.4 when HTTP Access Services is enabled. The vulnerability arises from improper handling of TCP connection requests, allowing remote attackers to trigger queue size delta errors that cause memory consumption and an HTTP...