Code injection

Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote attackers to cause a denial of service system crash via certain network traffic...

MS Windows Vista forged ARP packet Network Stack DoS Exploit

No description provided by source. !/usr/bin/env python :: Kristian Hermansen :: Date: 20070514 Reference: CVE-2007-1531 Description: Microsoft Windows Vista SP0 dumps interfaces when it receives this ARP packet. This DoS is useful for an internet cafe, wireless venue, or legitimate local attack...

Enumerate IPv4 Interfaces via SSH

Nessus was able to enumerate the network interfaces configured with IPv4 addresses by connecting to the remote host via SSH using the supplied credentials. TRUSTED...

Enumerate IPv6 Interfaces via SSH

Nessus was able to enumerate the network interfaces configured with IPv6 addresses by connecting to the remote host via SSH using the supplied credentials. TRUSTED...

Code injection

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties...

CVE-2007-1491

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties...

PT-2007-2464 · Red Hat · Jboss

Name of the Vulnerable Software and Affected Versions: JBoss affected versions not specified Description: The default configuration of JBoss does not restrict access to the console and web management interfaces, allowing remote attackers to bypass authentication and gain administrative access...

CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

CVE-2007-0931

The CVE describes a heap-based buffer overflow in the management interfaces of Aruba Mobility Controllers (200, 800, 2400, 6000) and Alcatel-Lucent OmniAccess Wireless (43xx, 6000). The underlying flaw allows remote attackers to trigger a denial of service (process crash) and potentially execute ...

CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

CentOS 4 : gtk2 (CESA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

Network Interfaces Enumeration (WMI)

Binary data wmilistinterfaces.nbin...

RHEL 4 : gtk2 (RHSA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability

Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT12-09-2006 ============================================================ Adobe/Macromedia Flash Player - Remote Code Execution ============================================================ Advisory Date...

Cisco CallManager Administration and User Options Web Interfaces Cross-Site Scripting Vulnerability

Cisco CallManager versions prior to 4.31, 4.23, 4.13SR4 and 3.35SR3 contain a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary script in the user's browser session. The vulnerability exists due to improper input sanitization in the CallManager Administration...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...

CVE-2006-1880

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...

Oracle Diagnostics Interfaces vulnerability

Overview An unspecified vulnerability in Oracle Diagnostics Interfaces may allow a remote, unauthenticated attacker to compromise system confidentiality and integrity. Description Oracle Diagnostics Interfaces contains a vulnerability. The details of this vulnerability are not clear. However,...

RHEL 3 : initscripts (RHSA-2006:0015)

Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system,...

Moderate: Red Hat Security Advisory: initscripts security update

Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system,...