Check Point Endpoint Security Server Information Disclosure

R7-0038: Check Point Endpoint Security Server Information Disclosure February 7, 2011 -- Vulnerability Details: The Check Point Endpoint Security Server and Integrity Server products inadvertently expose a number of private directories through the web interface. These directories include the SSL...

Microsoft IIS 6 parsing directory “x.asp” Vulnerability

Microsoft IIS 6 parsing directory Vulnerability Discovered by: Pouya daneshmand whhiranATyahooDOTcom http://securitylab.ir/blog Introduction: Using this vulnerability you can bypass some Security filters, for example a file with “.jpg” or “.rar” extension can be executed as an asp Active Server...

Fedora 13 : chm2pdf-0.9.1-8.fc13 (2011-0467)

This update fixes security bugs 474455 and 474457. The security issue is about unsafe use of fixed temporary directories by chm2pdf. This update will break --dontextract option. The option will not be shown in the list of available options. Note that Tenable Network Security has extracted the...

IcedTea System property information leak via public static

IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including 1 user.name, 2 user.home, and 3 java.home system properties, and other sensitive...

Fedora Update for sssd FEDORA-2011-0364

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2011-0364 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sssd FEDORA-2011-0337

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2011-0337 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CompactCMS 1.4.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: CompactCMS 1.4.1 Multiple Vulnerabilities Google Dork: intext:"Maintained with CompactCMS.nl" intitle:"Print: " Date: 17-12-2010 Author: NLSecurity Software Link: http://files.compactcms.nl/stable/ Version: CompactCMS 1.4.1...

CompactCMS 1.4.1 Cross Site Scripting / File Disclosure

Exploit Title: CompactCMS 1.4.1 Multiple Vulnerabilities Google Dork: intext:"Maintained with CompactCMS.nl" intitle:"Print: " Date: 17-12-2010 Author: NLSecurity Software Link: http://files.compactcms.nl/stable/ Version: CompactCMS 1.4.1 Credits: http://www.nlsecurity.org/ Extra: irc.6667.eu mai...

UBUNTU-CVE-2010-4695

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

Design/Logic Flaw

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

CVE-2010-4695

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

CVE-2010-4695

Removed by vendor...

CVE-2010-4695

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

Design/Logic Flaw

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...

CVE-2010-4512

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...

Information disclosure

IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including 1 user.name, 2 user.home, and 3 java.home system properties, and other sensitive...

Fedora 14 : tomcat6-6.0.26-14.fc14 (2010-16528)

Replaces tomcat6-6.0.26-13.fc14 - Resolves rhbz640686 - Upgrade of tomcat6 wipes out directories - WARNING - Back up all files that need to be preserved before package update or uninstall - WARNING CVE-2010-2227 applied Several Bug fixes : - tomcat user shell - Multiple instances of tomcat not...

CVE-2010-3867

Multiple directory traversal vulnerabilities in the modsitemisc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a 1 SITE MKDIR, 2 SITE RMDIR, 3 SITE SYMLINK...

[SECURITY] Fedora 14 Update: cvs-1.11.23-11.fc14

CVS Concurrent Versions System is a version control system that can record the history of your files usually, but not always, source code. CVS only stores the differences between versions, instead of every version of every file you have ever created. CVS also keeps a log of who, when, and why...

Home FTP Server 1.10.3 / 1.11.1 Directory Traversal

Exploit Title: Home FTP Server Directory Traversal Date: Oct 28, 2010 Author: chr1x Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Description: Home Ftp Server is an easy to use FTP server, that allows you to share files directly from your PC with lots of setup...