6252 matches found
Debian DSA-960-3 : libmail-audit-perl - insecure temporary file creation
The former update caused temporary files to be created in the current working directory due to a wrong function argument. This update will create temporary files in the users home directory if HOME is set or in the common temporary directory otherwise, usually /tmp. For completeness below is a co...
OpenSSH < 4.4 Multiple Vulnerabilities
Binary data 3751.prm...
OpenSSH < 4.4 Multiple Vulnerabilities
According to its banner, the version of OpenSSH installed on the remote host is affected by multiple vulnerabilities : - A race condition exists that may allow an unauthenticated, remote attacker to crash the service or, on portable OpenSSH, possibly execute code on the affected host. Note that...
CVE-2006-4991
RSA Keon Certificate Authority (KeonCA) Manager versions 6.5.1 and 6.6 are affected. The vulnerability allows local privileged users to hide CA activities by tampering auditor logs: (1) modifying or deleting a and its signature in the XML log without triggering the integrity check on the entire ...
CVE-2006-4901
Computer Associates CA eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments...
CA eSCC r81.0 eTrust Audit r81.5 - Web Server Full Path Disclosure
CA eSCC r81.0 eTrust Audit r81.5 - Web Server Full Path Disclosure source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - ...
RSA Keyon Manager audit functionality bypass
Log records blocks are independently signed, making it possible to remove whole block without notice. Records are collected locally before being signed and sent to server, making it possible to tamper log entries...
CA eSCC r81.0 eTrust Audit r81.5 - Audit Event System Replay Attack
CA eSCC r81.0 eTrust Audit r81.5 - Audit Event System Replay Attack source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue -...
CA eSCC r81.0 eTrust Audit r81.5 - Arbitrary File Manipulation
CA eSCC r81.0 eTrust Audit r81.5 - Arbitrary File Manipulation source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a...
CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Arbitrary File Manipulation
source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...
CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Replay Attack
source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...
CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Web Server Full Path Disclosure
source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...
CVE-2006-4642
AuditWizard 6.3.2 vulnerable when using Remote Audit: administrator password is logged in plaintext to LaytonCmdSvc.log, enabling local users to read sensitive information. The issue is evidenced by the CVE-2006-4642 records (NVD/NVD-derived description) and related advisories. No remediation det...
AuditWizard 6.3.2 gives away administrator password
I found that AuditWizard 6.3.2 by Layton Technologies is leaving the domain administrator password in the logfiles of machines that it audits if you use the Remote Audit feature. I've contacted them but they have yet to produce a fix. They have acknowledged the problem but according to their tech...
CVE-2006-4537
NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...
CVE-2006-4537
In DECnet-Plus on OpenVMS ALPHA 7.3-2 and 8.2, the NET$SESSION_CONTROL.EXE component writes a password to an audit log file after a successful connection following a network breakin, allowing local users to read the file and obtain passwords. This is the stated vulnerability. Patches are availabl...
[SA21705] OpenVMS Session Control Password Disclosure Security Issue
---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...
DSA-1158 streamripper
Bulletin has no description...