Ubuntu 10.04 LTS : linux-mvl-dove vulnerabilities (USN-1240-1)

Ryan Sweat discovered that the kernel incorrectly handled certain VLAN packets. On some systems, a remote attacker could send specially crafted traffic to crash the system, leading to a denial of service. CVE-2011-1576 Vasiliy Kulikov and Dan Rosenberg discovered that ecryptfs did not correctly...

eFront Enterprise 3.6.9 Arbitrary File Download

Title: ====== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability Date: ===== 2011-10-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 VL-ID: ===== 290 Introduction: ============= Tailored with larger...

eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability

Document Title: =============== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 Release Date: ============= 2011-10-07 Vulnerability...

Alureon Rootkit Morphs Again, Adds Steganography

The Alureon rootkit has become not just a major headache for its victims, with its insidious infection routines and persistence once on a machine. But it also has proved to be a challenge for researchers engaged in trying to identify new versions and unwind its new tactics and techniques. The...

[SECURITY] Fedora 14 Update: openldap-2.4.23-10.fc14

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Oracle Java Runtime Environment Insecure File Loading

A code execution vulnerability has been reported in Oracle's Java Runtime Environment. The vulnerability is due to a design flaw in the way that Java Runtime Environment loads configuration files. Attackers can exploit this vulnerability to set JVM options. Successful exploitation of this...

ZyWALL USG Appliance - Multiple Vulnerabilities

ZyWALL USG Appliance - Multiple Vulnerabilities Advisory: Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances Unauthenticated users with access to the management web interface of certain ZyXEL ZyWALL USG appliances can download and upload configuration files,...

ZyWALL USG Appliance Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Advisory: Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances Unauthenticated users with access to the management web interface of certain ZyXEL ZyWALL USG appliances can download and upload configuratio...

ZyWALL USG Appliance - Multiple Vulnerabilities

Advisory: Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances Unauthenticated users with access to the management web interface of certain ZyXEL ZyWALL USG appliances can download and upload configuration files, that are applied automatically. Details =======...

Ubuntu: Security Advisory (USN-1109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...

KastBook 0.4 Exploit

Exploit for php platform in category web applications / / / / / / / /// / // //// / // /// / / / / / // / // / / // / / / / / / / / / / / / / /// / // / / /// / /...

DSA-2198-1 tex-common - insufficient input sanitizing

Bulletin has no description...

Check Point Endpoint Security Server Information Disclosure

Check Point Endpoint Security Server or Integrity Server appears to be running on the remote system. The installed version exposes certain private directories, which contain sensitive information such as SSL private keys, configuration files, and certain application binaries. An unauthenticated,...

R7-0038: Check Point Endpoint Security Server Information Disclosure

R7-0038: Check Point Endpoint Security Server Information Disclosure February 7, 2011 -- Vulnerability Details: The Check Point Endpoint Security Server and Integrity Server products inadvertently expose a number of private directories through the web interface. These directories include the SSL...

Ubuntu Update for exim4 vulnerabilities USN-1060-1

Ubuntu Update for Linux kernel vulnerabilities USN-1060-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10601.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for exim4 vulnerabilities USN-1060-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Check Point Endpoint Security Server Information Disclosure

R7-0038: Check Point Endpoint Security Server Information Disclosure February 7, 2011 -- Vulnerability Details: The Check Point Endpoint Security Server and Integrity Server products inadvertently expose a number of private directories through the web interface. These directories include the SSL...

SuSE 11.1 Security Update : supportutils (SAT Patch Number 3468)

The supportconfig script did not disguise passwords in the config files it collected. CVE-2010-3912 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

CVE-2010-3912

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...

Design/Logic Flaw

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...