CVE-2006-5404: Undefined Security Weakness

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

gzip: Multiple vulnerabilities

Background gzip, the GNU zip compression utility, is a free and patent unencumbered replacement for the standard compress utility. Description Tavis Ormandy of the Google Security Team has reported multiple vulnerabilities in gzip. A stack buffer modification vulnerability was discovered in the L...

[SECURITY] [DSA 1181-1] New gzip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1181-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 19th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1172-1] New bind9 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1172-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1143-1] New dhcp packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1143-1 [email protected] http://www.debian.org/security/ Martin Schulze August 4th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1111-2] New Linux kernel 2.6.8 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1111-2 [email protected] http://www.debian.org/security/ Dann Frazier July 26th, 2006 http://www.debian.org/security/faq -...

Code injection

The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."...

CVE-2006-2918

The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."...

CVE-2006-2918

The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."...

CVE-2006-2918

The Lanap BotDetect ASP.NET CAPTCHA component (pre-1.5.4.0) stores the CAPTCHA UUID and hash in the ViewState, allowing a remote attacker to replay a known ViewState and bypass the CAPTCHA. Symantec advisory SYMSA-2006-005 confirms the bypass and notes the vendor fixed the issue in BotDetect ASP....

CVE-2006-2918: Undefined Security Weakness

The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."...

SUN Storage Automated Diagnostic Environment weak permissions

No description provided...

CVE-2006-2790

A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...

CVE-2006-2790

A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...

CVE-2006-2790

Technical details about CVE-2006-2790 are not publicly available in the provided documents; StorADE 2.4 is described to use world-writable permissions, but no vendor/version/fix information is provided here. Monitor for updates.

[SECURITY] [DSA 1086-1] New xmcd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1086-1 [email protected] http://www.debian.org/security/ Martin Schulze June 2nd, 2006 http://www.debian.org/security/faq -...

CVE-2006-2790: Undefined Security Weakness

A package component in Sun Storage Automated Diagnostic Environment StorADE 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges...

Design/Logic Flaw

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

CVE-2006-2733

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

CVE-2006-2733: Undefined Security Weakness

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...