Microsoft Visual FoxPro FPOLE.OCX ActiveX Control Arbitrary Command Execution Vulnerability

Description Microsoft Visual FoxPro ActiveX control is prone to a vulnerability that lets attackers execute arbitrary commands. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of the application using the ActiveX control typically Internet...

CVE-2007-5022

IBM Tivoli Storage Manager Client versions 5.x prior to 5.1.8.1/5.2.5.2/5.3.5.3/5.4.1.2 are affected by CVE-2007-5022. The Nessus entry describes a buffer overflow in the Client Acceptor Daemon (CAD) service that can be triggered by an HTTP request with a long Host header, potentially crashing th...

samba -- nss_info plugin privilege escalation vulnerability

The Samba development team reports: The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the "winbind nss info" smb.conf...

Format string and clients disconnection in Alien Arena 2007 6.10

Luigi Auriemma Application: Alien Arena 2007 http://red.planetarena.org Versions: = 6.10 and current SVN Platforms: Windows and Linux Bugs: A in-game format string in safebprintf B clients disconnection through spoofed clientconnect Exploitation: A remote versus server B remote versus clients Dat...

Soldat 1.4.2 - Multiple Remote Denial of Service Vulnerabilities

Soldat 1.4.2 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/25426/info Soldat is prone to multiple remote denial-of-service vulnerabilities because of how the game software handles unexpected input. Successfully exploiting these issues allows remote...

Toribash 2.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to execute arbitrary code in the content of t...

Toribash 2.x - Multiple Vulnerabilities

Toribash 2.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to...

Vulnerability in multiple "now playing" scripts for various IRC clients

In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...

Important: gnupg security update

1.4.5-13 - incorporate patch from Werner to work around clients which can't tell that multiple plain messages have been processed 230457...

PHP hosting Biller

Application: PHP HOSTING BILLER Web Site: http://www.jnshosts.com/phphostingbiller.php Versions: 1.0 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4 Fix 5 About Serapis...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

USN-459-2: pptpd regression

USN-459-1 fixed vulnerabilities in pptpd. However, a portion of the fix caused a regression in session establishment under Dapper for certain PPTP clients. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A flaw was discovered in the PPTP tunnel server...

JVN#19445002 APOP password recovery vulnerability

Impact APOP passwords may be compromised. When the same password is used for other systems, those systems could be compromised as well. Solution Products Affected Mail clients with an APOP implementation As this is a protocol issue, software fixes cannot solve the issue essentially. Encrypted...

CVE-2007-1558

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

DEBIAN-CVE-2007-1558

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

FrontBase FBExec Process Detection

There is a FrontBase FBExec process listening on the remote host. This service brokers connections from network clients to FrontBase database processes running on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

FreeBSD : samba -- format string bug in afsacl.so VFS plugin (57ae52f7-b9cc-11db-bf0f-0013720b182d)

The Samba Team reports : NOTE: This security advisory only impacts Samba servers that share AFS file systems to CIFS clients and which have been explicitly instructed in smb.conf to load the afsacl.so VFS module. The source defect results in the name of a file stored on disk being used as the...