CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

CVE-2006-3968 affects Sun Solaris 10 (3/05 HW2) on Sun Fire T2000 platforms. The crypto provider fails to correctly verify DSA signatures, which might allow data modification to go undetected. Root cause is incorrect DSA signature verification in the Solaris crypto provider when running on affect...

DSA-1125 drupal - several

Bulletin has no description...

[SECURITY] [DSA 1123-1] New libdumb packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1123-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...

EEYE: McAfee ePolicy Orchestrator Remote Compromise

McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...

CentOS 3 / 4 : openssl (CESA-2005:800)

Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as we...

[SECURITY] [DSA 1101-1] New courier packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1101-1 [email protected] http://www.debian.org/security/ Martin Schulze June 23rd, 2006 http://www.debian.org/security/faq -...

CVE-2006-2653

Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...

CVE-2006-2653

Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...

CVE-2006-2653

CVE-2006-2653 is an XSS vulnerability in D-Link DSA-3100, specifically in login_error.shtml, allowing remote attackers to inject arbitrary HTML or web scripts via an encoded uname parameter. Affected product: D-Link DSA-3100; vulnerable component: login_error.shtml handling of uname; impact descr...

D-Link DSA-3100 Cross-Site Scripting

D-Link DSA-3100 Cross-Site Scripting Tested on D-Link DSA-3100 Discovered by: jaime.blascoateazeldot.es http://www.eazel.es Description: D-Link DSA-3100 Airspot Gateway is vulnerable to a security vulnerability that allow Cross-Site Scripting attacks. Due to improper filtering, a remote attacker...

D-Link Airspot DSA-3100 Gateway - Login_error.SHTML Cross-Site Scripting

D-Link Airspot DSA-3100 Gateway - Loginerror.SHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/18168/info The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An...

D-Link Airspot DSA-3100 Gateway - 'Login_error.SHTML' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18168/info The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in t...

D-Link DSA-3100 wireless access point crossite scripting

Crossite scriptign with username on authentication page...

FreeBSD : cfengine -- arbitrary file overwriting vulnerability (8688d5cd-328c-11da-a263-0001020eed82)

A Debian Security Advisory reports : Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine,...

[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1053-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2006 http://www.debian.org/security/faq -...

CVE-2006-0231

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications...

Code injection

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications...

CVE-2006-0231

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications...

CVE-2006-0231

Symantec Scan Engine 5.0.0.24 (and possibly earlier versions before 5.1.0.7) uses the same private DSA key for all installations, enabling remote attackers to perform man-in-the-middle attacks and decrypt communications. Root cause: a single immutable DSA private key embedded in the SSL server ac...