5055 matches found
Microsoft WordPad Word 97 Converter Remote Code Execution Vulnerability
Description Microsoft WordPad is prone to a remote code-execution vulnerability because of a stack-based buffer overflow that may result in corrupted memory. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts...
Microsoft Windows WMI Service Isolation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected computers. The issue affects the following: Windows XP SP2 Windows Server...
phpGroupWare Detection
This host is running phpGroupWare, a web based messaging, collaboration and enterprise management platform. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Ubuntu: Security Advisory (USN-692-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for ekg, libgadu vulnerability USN-692-1
Ubuntu Update for Linux kernel vulnerabilities USN-692-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6921.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ekg, libgadu vulnerability USN-692-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Can social networks foster security?
It’s a departure from the stance that most people are taking these days when it comes to issues of social networking and security, but some industry players are pitching the idea eweek.com that the ever-more-popular communications applications could someday replace more traditional messaging...
Microsoft Windows Invalid Pointer Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected...
Microsoft Windows WINS Server WPAD and ISATAP Access Validation Vulnerability
Description The Microsoft Windows WINS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol and ISATAP Intra-Site Automatic Tunnel Addressing Protocol entries. An authenticated attacker may...
Microsoft Windows DNS Server Incorrect Caching DNS Spoofing Vulnerability
Description The Microsoft Windows DNS Server is prone to a DNS-spoofing vulnerability because the software fails to cache responses to specially crafted DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to redirect network traffic and to...
Microsoft Windows Kernel Handle Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected...
Microsoft Windows SChannel Authentication Spoofing Vulnerability
Description Microsoft Windows SChannel is prone to an authentication-spoofing vulnerability because it fails to properly validate certain client-server certificate exchanges. Successful exploits will allow attackers to authenticate to trusted servers by spoofing a legitimate user's credentials...
Microsoft Windows DNS Server WPAD Access Validation Vulnerability
Description The Microsoft Windows DNS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol entries. An authenticated attacker may exploit this issue to create a WPAD DNS entry. This may aid...
Microsoft Windows Kernel GDI EMF/WMF Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious EMF or WMF image file. Successfully exploiting this issue will allow attackers to execute arbitrary code with kernel-level...
openSUSE 10 Security Update : psi (psi-6042)
Remote attackers could crash the Psi instant messaging client via the file transfer port CVE-2008-6393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update psi-6042. The text description of this...
[SECURITY] Fedora 9 Update: psi-0.12.1-1.fc9
Psi is the premiere Instant Messaging application designed for Microsoft Windows, Apple Mac OS X and GNU/Linux. Built upon an open protocol named Jabber, Psi is a fast and lightweight messaging client that utilises the be st in open source technologies. Psi contains all the features necessary to...
[SECURITY] Fedora 10 Update: psi-0.12.1-1.fc10
Psi is the premiere Instant Messaging application designed for Microsoft Windows, Apple Mac OS X and GNU/Linux. Built upon an open protocol named Jabber, Psi is a fast and lightweight messaging client that utilises the be st in open source technologies. Psi contains all the features necessary to...
Blogsa <= 1.0 Beta 3 XSS Vulnerability
Software: Blogsa = 1.0 Beta 3 XSS Vulnerability Software Site: blogsa.net Discovered by: Onur YILMAZ aka DJR Blog: http://www.onuryilmaz.info E-mail: contactatonuryilmazdotinfo XSS http://localhost/Widgets.aspx?w=Search&p=do&searchText=scriptalertdocument.cookie/script Screen...
Directory traversal
Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...
CVE-2008-6308
CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...
CentOS Update for pidgin CESA-2008:0584 centos3 x86_64
Check for the Version of pidgin OpenVAS Vulnerability Test CentOS Update for pidgin CESA-2008:0584 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...