Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability

Rapid7, LLC Security Advisory Rapid7 Advisory R7-0023 Symantec Scan Engine File Disclosure Vulnerability Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0023.html CVE: CVE-2006-0232 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN FIXED: o...

[SA19444] Sun Cluster SunPlex Manager File Disclosure Vulnerability

TITLE: Sun Cluster SunPlex Manager File Disclosure Vulnerability SECUNIA ADVISORY ID: SA19444 VERIFY ADVISORY: http://secunia.com/advisories/19444/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun Cluster 3.x http://secunia.com/product/2595/...

EV0078.txt

New eVuln Advisory: Quirex Arbitrary File Disclosure Vulnerability http://evuln.com/vulns/78/summary.html --------------------Summary---------------- eVuln ID: EV0078 CVE: CVE-2006-0795 Software: Quirex Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 2.0.2 2.0 and earlier Critical...

[eVuln] Quirex Arbitrary File Disclosure Vulnerability

New eVuln Advisory: Quirex Arbitrary File Disclosure Vulnerability http://evuln.com/vulns/78/summary.html --------------------Summary---------------- eVuln ID: EV0078 CVE: CVE-2006-0795 Software: Quirex Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 2.0.2 2.0 and earlier Critical...

[SA18926] Quirex convert.cgi File Disclosure Vulnerability

TITLE: Quirex convert.cgi File Disclosure Vulnerability SECUNIA ADVISORY ID: SA18926 VERIFY ADVISORY: http://secunia.com/advisories/18926/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: Quirex 2.x...

[SA18924] PerlBLOG Multiple Vulnerabilities

TITLE: PerlBLOG Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18924 VERIFY ADVISORY: http://secunia.com/advisories/18924/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: PerlBLOG 1.x http://secunia.com/product/8128/ DESCRIPTION: Aliaksand...

[SA18810] Ansilove File Disclosure and File Upload Vulnerabilities

TITLE: Ansilove File Disclosure and File Upload Vulnerabilities SECUNIA ADVISORY ID: SA18810 VERIFY ADVISORY: http://secunia.com/advisories/18810/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, System access WHERE: From remote SOFTWARE:...

phpicalendar -- file disclosure vulnerability

The phpicalendar team reports that there is an unspecified vulnerability within phpicalendar. This seems to be a file disclosure vulnerability caused by improper checking of the template parsing function. This would allow an attacker to disclose any file readable by the user under which the...

IBM AIX 5.3 - GetShell GetCommand File Disclosure

IBM AIX 5.3 - GetShell GetCommand File Disclosure source: https://www.securityfocus.com/bid/16103/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This vulnerability may let the attacker gain unauthorized read access to shell scripts on the computer. -bash-3.00$ ls -l...

IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Disclosure

source: https://www.securityfocus.com/bid/16103/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This vulnerability may let the attacker gain unauthorized read access to shell scripts on the computer. -bash-3.00$ ls -l /tmp/k.sh -rwx------ 1 root system 79 2005-12-22 23:...

Advisory 26/2005: TinyMCE Compressor Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: TinyMCE Compressor Vulnerabilities Release Date: 2005/12/29 Last Modified: 2005/12/29 Author: Stefan Esser [email protected] Application: TinyMCE Compressor = 1.0.5...

[Full-disclosure] SEC Consult SA-20051223-1 :: File Disclosure using df_next_page parameter in OracleAS Discussion Forum Portlet

SEC Consult Security Advisory 20051223-1 ======================================================================== title: File Disclosure using dfnextpage parameter in OracleAS Discussion Forum Portlet program: OracleAS Discussion Forum Portlet vulnerable version: Version of May 2005 homepage:...

iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure

Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=352&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro Inc.'s ServerProtect provides antivirus scanning with centralized management ...

SEC-20051125-0.txt

SEC-CONSULT Security Advisory ======================================================================= title: Even More Vulnerabilities in VTiger CRM program: vtiger CRM vulnerable version: 4.2 and earlier homepage: http://www.vtiger.com found: 2005-11-06 by: D. Fabian / SEC-CONSULT /...

SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM

SEC-CONSULT Security Advisory 20051125-0 ======================================================================= title: Even More Vulnerabilities in VTiger CRM program: vtiger CRM vulnerable version: 4.2 and earlier homepage: http://www.vtiger.com found: 2005-11-06 by: D. Fabian / SEC-CONSULT /...

CVE-2002-2187

Technical details are not publicly available in the provided documents for CVE-2002-2187; monitor for updates.

CVE-2002-2187

Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact...

walla30.txt

Application: Walla TeleSite Vendors: http://www.walla.co.il Versions: 3.0 and perior Platforms: Windows ISAPI, a few vulnerabilities apply Linux too Bug: Multiple Vulnerabilities Exploitation: Remote with browser Date: 13 Nov 2005 Author: Rafi Nahum, Pokerface e-mail: [email protected] web: N...

Hardened-PHP Project Security Advisory 2005-21.80

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in PHPKIT Release Date: 2005/11/07 Last Modified: 2005/11/04 Author: Christopher Kunz Application: PHPKIT 1.6.1 R2 and prior Severity: Cross-Site...

ToendaCMS 0.6.1 - 'admin.php' Directory Traversal

source: https://www.securityfocus.com/bid/15348/info toendaCMS is reported prone to a directory traversal vulnerability. It is demonstrated that this issue may be leveraged to disclose the contents of arbitrary web-server readable files. A remote attacker may exploit this vulnerability to reveal...