CVE-2005-0229: Undefined Security Weakness

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt...

[Full-Disclosure] Credit Card data disclosure in CitrusDB

Credit Card data disclosure in CitrusDB A group of students at our lab called RedTeam found an information disclosure vulnerability in CitrusDB which can result in disclosure of credit card information. Details ======= Product: CitrusDB Affected Version: = 0.3.5 Immune Version: =0.3.6 OS affected...

CVE-2004-1435: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via a large number of TCP connections with an invalid response instead of th...

CVE-2004-1432: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed 1 IP or 2 ICMP packets...

CVE-2004-1434: Undefined Security Weakness

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.10 to 4.12, 4.5x, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed SNMP packets...

CitrusDB 0.10.20.3 Credit Card Data - Remote Information Disclosure

CitrusDB 0.10.20.3 Credit Card Data - Remote Information Disclosure source: https://www.securityfocus.com/bid/12402/info A remote information disclosure issue affects CitrusDB. This issue is due to a design problem that grants unauthorized users the ability to export sensitive data. An attacker m...

CitrusDB 0.1/0.2/0.3 Credit Card Data - Remote Information Disclosure

source: https://www.securityfocus.com/bid/12402/info A remote information disclosure issue affects CitrusDB. This issue is due to a design problem that grants unauthorized users the ability to export sensitive data. An attacker may leverage this issue to gain access to sensitive information...

CVE-2004-1435

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via a large number of TCP connections with an invalid response instead of th...

CVE-2004-2359

Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality...

USN-38-1: Linux kernel vulnerabilities

CAN-2004-0814: Vitaly V. Bursov discovered a Denial of Service vulnerability in the "serio" code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...

CVE-2004-0244

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...

CVE-2002-1574

CVE-2002-1574 describes a buffer overflow in the ixj telephony card driver of Linux kernels prior to 2.4.20. Connected sources confirm the issue affects the ixj driver in Linux, and Red Hat advisories (RHSA-2004:044, RHSA-2004:106) reference this and indicate that updated kernel packages contain ...

CVE-2002-1574: Undefined Security Weakness

Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors...

Solaris 8 (sparc) : 108909-13

CDE 1.4: Smart Card Administration GUI patch. Date this patch was last updated by Sun : Feb/26/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Cisco 6000/6500/7600 series systems fail to properly process layer 2 frames

Overview Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 MSFC2 fail to properly process layer 2 frames. Description Cisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted...

CVE-2004-0311

CVE-2004-0311 affects APC Web/SNMP Management SmartSlot Card, specifically versions 3.0 through 3.0.3 and 3.21. The issue is a default password vulnerability: the device ships with the password TENmanUFactOryPOWER, allowing remote attackers to gain unauthorized access. Connected documents corrobo...

CVE-2004-0311

American Power Conversion APC Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access...

CVE-2004-0244

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...

CVE-2004-0244

Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or Optical Services Module (OSM) are affected by a crafted layer-2 frame vulnerability. A layer-2 frame that encapsulates a layer-3 packet with inconsistent length can cause the device to freeze or res...

CVE-2004-0311: Undefined Security Weakness

American Power Conversion APC Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access...