6834 matches found
GLSA-200409-17 : SUS: Local root vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-17 SUS: Local root vulnerability Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect call to...
SUS: Local root vulnerability
Background SUS is a utility that allows regular users to be able to execute certain commands as root. Description Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect...
[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME separator issue
-- Corsaire Security Advisory -- Title: Multiple vendor MIME separator issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-006 -- Scope -- The aim of this document is to clearly define a...
CVE-2002-1265
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service hang...
Icecast list.cgi User-Agent XSS
The remote server runs a version of Icecast that is as old or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a result of...
CVE-2004-0819
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service crash via an ICMP echo ping packet...
Linksys Wireless Access Point (WAP) Detection (HTTP) (deprecated)
Binary data 1603.prm...
RPC mountd Service In Use
Binary data 1023.prm...
RPC NIS ypupdated Service In Use
Binary data 1042.prm...
UUCP Server Detection
Binary data 1901.prm...
Microsoft IIS Patch Level Detection (English versions only)
Binary data 1718.prm...
Mozilla Web Client Detection
Binary data 1769.prm...
everythingform.cgi Multiple Vulnerabilities
Binary data 1657.prm...
Cerberus Helpdesk < Cerberus Helpdesk 4.0 Build 603
Binary data 4519.prm...
Nessus symbolic links problem
adduser temporayr files symlink problem...
CGI bugs
No description provided...
Verylost LostBook 1.1 - Message Entry HTML Injection
source: https://www.securityfocus.com/bid/10825/info Reportedly Verylost lostBook is affected by an HTML injection vulnerability in its message entry functionality. This issue is due to a failure of the application to properly validate and sanitize user-supplied input before including it in...
Fedora Core 1 : krb5-1.3.3-6 (2004-149)
Bugs have been fixed in the krb5anametolocalname library function. Specifically, buffer overflows were possible for all Kerberos versions up to and including 1.3.3. The krb5anametolocalname function translates a Kerberos principal name to a local account name, typically a UNIX username. This...
Solaris 8 (x86) : 110336-03
CDE 1.4x86: dtprintinfo patch. Date this patch was last updated by Sun : Dec/03/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...