DSA-1106 ppp - programming error

Bulletin has no description...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0574 Updated kernel packages that fix a privilege escalation security issue in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. Th...

Code injection

Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743...

SA-2006-006 - Drupal Core - Execution of arbitrary files in certain Apache configurations

Certain -- alas, typical -- configurations of Apache allows execution of carefully named arbitrary scripts in the files directory. Drupal now will attempt to automatically create a .htaccess file in your "files" directory to protect you. This line references SA2006006 to lead Apache administrator...

CVE-2006-2223

Removed by vendor...

Double free

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

RHEL 2.1 : kernel (RHSA-2006:0191)

Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 32 bit architectures This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 64 bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

[Full-disclosure] Symantec Antivirus Library Remote Heap Overflows

Date December 20, 2005 Vulnerability The Symantec Antivirus Library provides file format support for virus analysis. During decompression of RAR files Symantec is vulnerable to multiple heap overflows allowing attackers complete control of the systems being protected. These vulnerabilities can be...

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on...

CVE-2005-3997

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...

CVE-2005-3997

Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...

CVE-2005-3997

CVE-2005-3997 (Zen Cart) affects Zen Cart 1.2.6d and earlier. Under certain PHP configurations, remote attackers can obtain sensitive information by directly requesting files in admin/includes, leaking the web server path in error messages. Affected files include: graphs/banner_daily.php, graphs/...

GLSA-200511-08 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-08 PHP: Multiple vulnerabilities Multiple vulnerabilities have been found and fixed in PHP: a possible $GLOBALS variable overwrite problem through file upload handling, extract and importrequestvariables CVE-2005-3390 a loc...

Fedora Core 4 : openldap-2.2.29-1.FC4 (2005-992)

This is an experimental upgrade of OpenLDAP to 2.2.29 for FC4. Before I push it to final, I need some confirmation that upgrading to it will not break existing configurations. If I don't hear any objections, I should push it to final in a week or so. Note that Tenable Network Security has extract...

Unprotected Netware Management Portal

The Netware Management Portal software is running on this machine. The Portal allows anyone to view the current server configuration and locate other Portal servers on the network. It is possible to browse the server's filesystem by requesting the volume in the URL. However, a valid user account ...

Login configurations

Provide the username/password for the common services: HTTP, FTP, NNTP, POP2, POP3, IMAP and SMB NetBios. SPDX-FileCopyrightText: 2005 Georges Dagousset Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2002-1833

The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...