SLES9: Security update for Cyrus SASL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cyrus-sasl-devel cyrus-sasl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for Cyrus SASL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cyrus-sasl-devel cyrus-sasl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020865 within the SuSE...

Microsoft Windows Shell Remote Code Execution (MS04-024; CVE-2004-0420)

A vulnerability has been discovered in the Microsoft Windows Shell, an API that provides a basic framework for the Windows user interface. The Shell provides many functions that perform various configuration tasks and background operations, such as launching applications through the Start Menu...

Apache apr-util IPv6 URI Parsing (CVE-2004-0786)

Apache HTTP server version 2 introduced the Apache Portable Runtime APR, which provides a middle layer between platform independent Apache code and the native operating system API. One of the functions provided by the APR utilities component is the parsing of URI strings. Having this functionalit...

Ipswitch WhatsUp Gold DOS Device HTTP Request Denial of Service (CVE-2004-0799)

WhatsUp is a network management and monitoring application developed by Ipswitch Inc. It has a built-in web server to enable remote access to the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold processes a request that contains a special device nam...

SuSE9 Security Update : gnome-vfs (YOU Patch Number 10009)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

SuSE9 Security Update : apache2-mod_python (YOU Patch Number 11804)

This update fixes a buffer overflow in apache2-modpython that occurs while using python-based output-filter. This bug can be triggered remotely to read possibly confidential data from the process space of the web-server and in rare cases to execute arbitrary code. CVE-2004-2680 %NASLMINLEVEL 7030...

SuSE9 Security Update : libxml (YOU Patch Number 9579)

This update adds missing patches for a buffer overflow in URL parsing code CVE-2004-0989 and a buffer overflow while handling DNS responses. CVE-2004-0110 These bugs can be exploited remotely to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

SuSE9 Security Update : openmotif (YOU Patch Number 9399)

This update fixes following security problems in OpenMotif : - Several stack overflows in the libXPM image handling library contained within OpenMotif were fixed. CVE-2004-0687 - Several integer overflow problems in the libXPM image handling library contained within OpenMotif were fixed...

SuSE9 Security Update : enscript (YOU Patch Number 9867)

Unsanitised input can caues the execution of arbitrary commands via EPSF pipe support. This has been disabled, also upstream. CVE-2004-1184 - Due to missing sanitising of filenames it is possible that a specially crafted filename can cause arbitrary commands to be executed. CVE-2004-1185 -...

SuSE9 Security Update : wget (YOU Patch Number 11090)

This update fixes a security bug in wget, where evil servers could send terminal escape codes to the user calling wget. This would only affect interactive sessions. CVE-2004-1488 Additionally a previous '.file' fix was found to be buggy and replaced. This bug could lead to '.directories' not bein...

SuSE9 Security Update : Midnight Commander (YOU Patch Number 9797)

Various security bugs ranging from denial of service conditions to command execution have been fixed. CVE-2004-1004, CVE-2004-1005, CVE-2004-1176 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : libxml2 (YOU Patch Number 9581)

This update fixes a buffer overflow in the DNS handling code CVE-2004-0110. This bug can be exploited remotely via a DNS server under the control of the attacker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : gnome-vfs2,gnome-vfs2-doc (YOU Patch Number 10010)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

SuSE9 Security Update : unarj (YOU Patch Number 9523)

A directory traversal bug was spotted in the unarj program CVE-2004-0947. Additionaly SUSE Security audited unarj and found several buffer overflows which are also fixed by this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. OpenVAS Vulnerability Test $Id: fcore20098582.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8582 libxml Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-8594 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8594. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sql injection

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...