[DRUPAL-SA-2007-018] Drupal 4.7.7 and 5.2 fix multiple cross site scripting vulnerabilities

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2007-018 ---------------------------------------------------------------------------- Project: Drupal core Version: 4.7.x, 5.x Date: 2007-July-26 Security risk: Moderately critical...

Cisco VPN Client Version Detection

Cisco VPN Client, used for secure connectivity, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25549; scriptversion"1.25"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/01/20"; scriptxrefname:"IAVT",...

USN-474-1: xscreensaver vulnerability

It was discovered that xscreensaver did not correctly validate the return values from network authentication systems such as LDAP or NIS. A local attacker could bypass a locked screen if they were able to interrupt network connectivity...

CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...

CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...

CVE-2007-1859

XScreenSaver 4.10 is affected when using a remote directory service for credentials. The root cause is in drivers/lock.c where getpwuid handling can fail when there is no network connectivity, causing XScreenSaver to crash and unlock the screen, effectively allowing a local attacker to bypass aut...

CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...

CVE-2007-1859

XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...

CVE-2007-1196

Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers...

Code injection

Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers...

CVE-2007-1196

Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers...

CVE-2007-1196

CVE-2007-1196 affects the Citrix Presentation Server Client for Windows prior to 10.0. The vulnerability is related to ICA connectivity through proxy servers and allows remote sites to execute arbitrary code. Impact is implied as full compromise of confidentiality, integrity, and availability. Af...

Security fix for the ALT Linux 5 package centerim version 4.21.0-alt5

Feb. 16, 2007 Ilya Mashkin 4.21.0-alt5 - fix 10786 connect to Jabber on 64-bit systems - fix CVE-2007-0160...

SSH Tectia Manager Agent进程本地特权提升漏洞

SSH Tectia基于SSH技术，集中管理情况下提供 安全的系统管理，安全的文件传输，安全的程序之间的连接。 SSH Tectia Manager下的管理代理程序存在漏洞，本地攻击者可以利用漏洞使用Unix管理代理以ROOT权限起用非特权进程。 只有在如下条件下可触发此问题： - 实际管理的sshd程序已经停止。 - 用户已启动自身的非特权进程两进制调用SSHD。 - 管理代理通过管理服务GUI中的管理服务"Restart"按钮来重新启动sshd服务程序。 - 通过进程列表读取信息，杀掉非特权进程sshd服务器，然后以ROOT权限重启动相同的两进制程序。...

CVE-2006-6266

Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests aka ping tests in response to packets from non-Teredo source addresses, which might allow remote attackers to induce Teredo clients to send packets to third parties...

CVE-2006-6266

Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests aka ping tests in response to packets from non-Teredo source addresses, which might allow remote attackers to induce Teredo clients to send packets to third parties...

Hummingbird Connectivity 10 SP5 LPD Buffer Overflow

This module exploits a stack buffer overflow in Hummingbird Connectivity 10 LPD Daemon. This module has only been tested against Hummingbird Exceed v10 with SP5. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

inetconnCrash.txt

DEFAULT BASEURL= InternetShortcut...

Hummingbird Connectivity FTP service XCWD Overflow

The remote host is running the Hummingbird Connectivity FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and ar...

HTTP Server type and version

This script detects and reports the HTTP Server SPDX-FileCopyrightText: 2005 H. Scholz & Contributors Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...