Fedora Core 4 : epiphany-1.6.3-2 (2005-620)

Epiphany is a simple GNOME web browser based on the Mozilla rendering engine. There were several security flaws found in the mozilla package, which epiphany depends on. Users of epiphany are advised to upgrade to this updated package which has been rebuilt against a version of mozilla not...

Compromising pictures of Microsoft Internet Explorer!

Synopsis: --------- Well, not really. Instead, at the risk of boring you to death, I'd like to report on a casual 30-minute experiment I've conducted of recent. This experiment resulted in identifying a potential remote code execution path in Microsoft Internet Explorer, plus some other bugs, and...

PHPAUCTION Multiple Vulnerabilities

Binary data 3055.prm...

ZH2005-14SA.txt

ZH2005-14SA Phishing problems on MSN Date: July 1th 2005 Author:Giovanni Delvecchio email: [email protected] Overview ======= Multiple phishing problems exist on support.msn.com, permitting to a possible attacker to conduct phishing attack against a user. Details ===== 1Input passed to the "r...

USN-143-1: Linux amd64 kernel vulnerabilities

A Denial of Service vulnerability has been discovered in the ptrace call on the amd64 platform. By calling ptrace with specially crafted "non-canonical" addresses, a local attacker could cause the kernel to crash. This only affects the amd64 platform. CAN-2005-1762 ZouNanHai discovered that a loc...

YaPiG < 0.95b Multiple Vulnerabilities

The remote host is running YaPiG, a web-based image gallery written in PHP. The installed version of YaPiG is vulnerable to multiple flaws : - Remote and local file inclusion. - Cross-site scripting and HTML injection flaws through 'view.php'. - Directory traversal flaw through 'upload.php'...

Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication

Overview A vulnerability in Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication and potentially access private network resources. Description Easy VPN Server Cisco IOS Easy VPN Server allows an IOS device to function as a VPN concentrator, providing...

Sawmill < 7.1.6 Multiple Vulnerabilities

Binary data 2947.prm...

BEA WebLogic <= 8.1 SP4 Multiple Vulnerabilities (XSS, DoS, ID, more)

According to its banner, the remote host is running a version of BEA WebLogic Server or WebLogic Express that is prone to multiple vulnerabilities. These flaws could lead to buffer overflows, denial of service, unauthorized access, cross-site scripting attacks, and information disclosure. C Tenab...

Fedora Core 2 : telnet-0.17-28.FC2.1 (2005-277)

Two buffer overflow flaws were discovered in the way the telnet client handles messages from a server. An attacker may be able to execute arbitrary code on a victim's machine if the victim can be tricked into connecting to a malicious telnet server. The Common Vulnerabilities and Exposures projec...

Gaim < 1.3.0 Multiple Vulnerabilities

Binary data 2894.prm...

PT-2005-2459 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue concerns multiple format string vulnerabilities in the DHCP and ANSI A dissectors. These vulnerabilities may allow remote attackers to execute arbitrary code. Recommendations: For...

CVE-2005-0463

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in 1 host.php, 2 port.php, and 3 index.php...

CVE-2005-0815

Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem...

eGroupWare 1.0 - sitemgr-siteindex.php?category_id Cross-Site Scripting

eGroupWare 1.0 - sitemgr-siteindex.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate...

eGroupWare 1.0 - ttsindex.php?filter SQL Injection

eGroupWare 1.0 - ttsindex.php?filter SQL Injection source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input...

eGroupWare 1.0 - index.php?cats_app SQL Injection

eGroupWare 1.0 - index.php?catsapp SQL Injection source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. Thes...

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

XAMPP < 1.4.14 Multiple Vulnerabilities

The remote host is running XAMPP, an Apache distribution containing MySQL, PHP, and Perl. It is designed for easy installation and administration. The remote version of this software contains security flaws and password disclosure weaknesses that could allow an attacker to perform cross-site...

MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066)

The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw could allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host, or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a...