MLdonkey 2.9.7 Double Slash File Disclosure

MLdonkey up to 2.9.7 has a vulnerability that allows remote user to access any file with rights of running Mldonkey daemon by supplying a special-crafted request ok, there's not much special about double slash to an Mldonkey http GUI tcp/4080 usually. Reference:...

MLdonkey 2.9.7 - Arbitrary File Disclosure

MLdonkey up to 2.9.7 has a vulnerability that allows remote user to access any file with rights of running Mldonkey daemon by supplying a special-crafted request ok, there's not much special about double slash to an Mldonkey http GUI tcp/4080 usually. Reference:...

Fedora Update for wireshark FEDORA-2008-7936

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2008-7936 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for system-config-network FEDORA-2008-4633

Check for the Version of system-config-network OpenVAS Vulnerability Test Fedora Update for system-config-network FEDORA-2008-4633 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnumeric FEDORA-2008-1313

Check for the Version of gnumeric OpenVAS Vulnerability Test Fedora Update for gnumeric FEDORA-2008-1313 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for gnumeric FEDORA-2008-1403

Check for the Version of gnumeric OpenVAS Vulnerability Test Fedora Update for gnumeric FEDORA-2008-1403 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for tk FEDORA-2008-1131

Check for the Version of tk OpenVAS Vulnerability Test Fedora Update for tk FEDORA-2008-1131 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Fedora Update for tk FEDORA-2008-1122

Check for the Version of tk OpenVAS Vulnerability Test Fedora Update for tk FEDORA-2008-1122 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Microsoft Visual Basic Kill Bits

Visual Basic is an event-driven programming language that was created by Microsoft for building stand alone Windows-based programs. Developers can use it for quickly building GUI applications. Several remote code execution vulnerabilities have been reported in Microsoft Visual Basic. To trigger...

Fedora Core 10 FEDORA-2009-1289 (gnumeric)

The remote host is missing an update to gnumeric announced via advisory FEDORA-2009-1289. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

SAP GUI 7.1 WebViewer2D ActiveX — Insecure Methods

Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected:Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov...

SAP GUI 7.1 WebViewer3D ActiveX — Insecure Methods

Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov Description SAP G...

[SECURITY] Fedora 9 Update: gnumeric-1.8.2-4.fc9

Gnumeric is a spreadsheet program for the GNOME GUI desktop environment...

[SECURITY] Fedora 10 Update: gnumeric-1.8.2-6.fc10

Gnumeric is a spreadsheet program for the GNOME GUI desktop environment...

CVE-2009-0288

Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request...

CVE-2009-0289

CVE-2009-0289 affects k23productions TFTPUtil GUI versions 1.2.0 through 1.3.0. The issue allows remote attackers to cause a denial-of-service (service crash) by sending a crafted request with a long filename. The publicly documented workaround is to restrict the length of filenames in requests t...

CVE-2009-0288

CVE-2009-0288 affects k23productions TFTPUtil GUI versions 1.2.0 and 1.3.0. Multiple connected sources confirm a directory traversal vulnerability that allows remote attackers to read arbitrary files outside the TFTP root via traversal sequences in a GET request. Practical impact is potential una...

CVE-2008-3866

Affected product : Trend Micro OfficeScan NSC components (TmPfw.exe) used in OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007/2008 (17.0.1224). Vulnerability : The Personal Firewall service relies on client-side password protection in the configuration GUI, but this check is not enforced by ...

TFTPUtil GUI TFTP Server Denial of Service Vulnerability

--Vulnerability Summary-- Title: TFTPUtil GUI TFTP Server Denial of Service Vulnerability Product: TFTPUtil GUI Discovered: November 26, 2008 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: k23productions as per various download sites Vendor URL: http://sourceforge.net/projects/tftputil...

TFTPUtil GUI TFTP Server Denial of Service Vulnerability

Title: TFTPUtil GUI TFTP Directory Traversal Product: TFTPUtil GUI Discovered: November 26, 2008 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: k23productions Vendor URL: http://sourceforge.net/projects/tftputil Vendor notification date: December 1, 2008 Vendor response date: December 8,...