3126 matches found
Network Time Protocol Package Remote Message Loop Denial of Service Vulnerability
The Network Time Protocol NTP package contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an error in handling certain malformed messages. An unauthenticated, remote attacker could send a malicious N...
Log Rover pword Parameter SQL Injection
The remote host is running Log Rover, an ASP application for analyzing web server log files. The web interface included with the version of Log Rover installed on the remote host fails to sanitize user-supplied input to the 'pword' parameter of the 'login.asp' script before using it to construct...
CVE-2009-1296
The eCryptfs support utilities ecryptfs-utils 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root...
CVE-2009-1296
The eCryptfs support utilities ecryptfs-utils 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root...
Mandriva Update for gnome-utils MDKA-2007:040-1 (gnome-utils)
Check for the Version of gnome-utils OpenVAS Vulnerability Test Mandriva Update for gnome-utils MDKA-2007:040-1 gnome-utils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for tomcat5 MDVSA-2008:188 (tomcat5)
Check for the Version of tomcat5 OpenVAS Vulnerability Test Mandriva Update for tomcat5 MDVSA-2008:188 tomcat5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Cross site scripting
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
CVE-2008-6645
Opencosmo VisualSentinel 0.7 contains an XSS vulnerability when processing the User-Agent header ($_SERVER['HTTP_USER_AGENT']), which is displayed in log files. This could allow injection of arbitrary script/HTML. The NVD reports CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided...
CVE-2008-6645
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
GLSA-200903-40 : Analog: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200903-40 Analog: Denial of Service Diego E. Petteno reported that the Analog package in Gentoo is built with its own copy of bzip2, making it vulnerable to CVE-2008-1372 GLSA 200804-02. Impact : A local attacker could place...
Analog: Denial of service
Background Analog is a a webserver log analyzer. Description Diego E. Petteno reported that the Analog package in Gentoo is built with its own copy of bzip2, making it vulnerable to CVE-2008-1372 GLSA 200804-02. Impact A local attacker could place specially crafted log files into a log directory...
Pyrophobia 2.1.3.1 LFI Command Execution Exploit
Exploit for unknown platform in category web applications ================================================ Pyrophobia 2.1.3.1 LFI Command Execution Exploit ================================================ !/usr/bin/perl...
[SECURITY] Fedora 9 Update: fail2ban-0.8.3-18.fc9
Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/errorlog and bans IP that makes too many password failures. It updates firewall rules to reject the IP address...
Password is being logged for 500 errors
The user passwords are being exposed in the log files when a 500 error happens. The following Jira solved the problem for the information displayed in the user Browser: http://jira.atlassian.com/browse/CONF-12360...
Password is being logged for 500 errors
The user passwords are being exposed in the log files when a 500 error happens. The following Jira solved the problem for the information displayed in the user Browser: http://jira.atlassian.com/browse/CONF-12360...
Openfire < 3.6.3 Multiple Vulnerabilities
Binary data 4925.prm...
Code injection
Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to 1 rmsock and 2 rmsock64 not creating "secure log files."...
CVE-2009-0370
Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to 1 rmsock and 2 rmsock64 not creating "secure log files."...
CVE-2009-0370
Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to 1 rmsock and 2 rmsock64 not creating "secure log files."...
System: plain text passwords stored in debug log
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files...