495 matches found
[SECURITY] [DSA 1952-2] End-of-life announcement for asterisk in oldstable
------------------------------------------------------------------------ Debian Security Advisory DSA-1952-2 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
DSA-1906-1 clamav - end-of-life announcement
Security support for clamav, an anti-virus utility for Unix, has been discontinued for the stable distribution lenny and the oldstable distribution etch. Clamav Upstream has stopped supporting the releases in etch and lenny. Also, it is not easily possible to receive signature updates for the vir...
(RHSA-2009:1076) Low: Red Hat Enterprise Linux 2.1 - End Of Life
In accordance with the Red Hat Enterprise Linux Errata Support Policy, the 7 year life-cycle of Red Hat Enterprise Linux 2.1 has ended. Red Hat has discontinued the technical support services, bug fix, enhancement, and security errata updates for the following versions: Red Hat Enterprise Linux A...
SSH (SSF Derivative) Detection
According to its banner, the remote SSH server is the SSF derivative. SSF had been written to be compliant with restrictive laws on cryptography in some European countries, France especially. These regulations have been softened and OpenSSH received a formal authorisation from the French...
JVN#50876069 Flash Player allows to send arbitrary HTTP headers
Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser. Flash Player contains a vulnerability that could allow a remote attacker to modify HTTP headers of client requests and conduct a HTTP request splitting attack...
JVN#35677737 Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files
Some models of Sony Pocket Bit series contain Fingerprint Authentication Software. Fingerprint Authentication Software installs hidden folders and files, that is, the folders and files are not visible using ordinary system tools. Impact A remote attacker could use hidden folders for unintended...
yabbse-all.txt
Hey str0ke - Are you the same str0ke whose code I've been ripping, damn I guess I better release my first N3td3v Sponsering Disclosure..... NDSD-06-001: YABBSE SQL Injection June 23, 2006 -- Sponsered post http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046903.html -- Affected Vendor...
[SA19722] Linksys RT31P2 SIP Messages Denial of Service Vulnerabilities
TITLE: Linksys RT31P2 SIP Messages Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA19722 VERIFY ADVISORY: http://secunia.com/advisories/19722/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Linksys RT31P2 http://secunia.com/product/9456/ DESCRIPTION:...
Linksys RT31P2 VoIP router denial of service vulnerabilities
Overview The Linksys RT31P2 VoIP router contains several vulnerabilities that may allow a remote, unauthenticated attacker to cause a denial of service. Description The Linksys RT31P2 is a broadband router that includes Voice over Internet Protocol VoIP telephone functionality. The RT31P2 unit...
Netscape Browser < 8.0.4 Multiple Vulnerabilities
The remote host is using Netscape Browser / Netscape Navigator, an alternative web browser. The version of Netscape Browser / Netscape Navigator installed on the remote host is prone to multiple flaws, including one that may allow an attacker to execute arbitrary code on the affected system. C...
Ares Fileshare Detection
Ares Fileshare is installed on the remote host. Ares Fileshare is a P2P application that supports connecting to several P2P networks; eg, Gnutella and OpenFT. As such, it may not be suitable for use in a business environment. In addition, note that it's not possible for Nessus to determine the...
Shaun2k2 Palmhttpd Server 3.0 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/9608/info It has been reported that Palmhttpd server may be prone to remote denial of service vulnerability, when an attacker attempts to establish multiple connections with the software. This issue occurs because PalmOS can only handle one client...
Guestbook v1.1.3 CSS Vuln
Project: Filebased guestbook. Author: Copyright c Urs [email protected] Version: 1.1.3 Update: 17-09-2002 Homepage: http://www.circle.ch/scripts/ This PHP guest book script is vulnerable to hostile cross scripting in the 'comment' section of guest book posts. Comments span across multiple pages, with...
DPGS allows any file to be overwritten
Taken from the scripts website: "WARNING: DPGS is no longer maintained and is thus discontinued. If you would like to take over its development, email me. - July 30, 2000" This is the reasoning to why I did not contact the author prior to this email. This is an example of how bad input filtering...
