919 matches found
RedHat Update for nss_ldap RHSA-2008:0715-01
Check for the Version of nssldap OpenVAS Vulnerability Test RedHat Update for nssldap RHSA-2008:0715-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-1999-1593
Windows Internet Naming Service WINS allows remote attackers to cause a denial of service connectivity loss or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are...
[Backports-security-announce] Security Update for devscripts
Adam D. Barratt uploaded new packages for devscripts which fixed the following security problems: Debian BTS 507482 When copying files from a remote host for signing, the temporary directory created was named based on the process ID rather than using mktemp. Debian BTS 508111 A call to mktemp use...
PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability
PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability Description: BEA Plumtree portal is vulnerable to a internal hostname disclosure vulnerability. The internal hostname of the server hosting BEA Plumtree portal is always included at the bottom of every requested HTML page...
CVE-2002-2346
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses...
CVE-2007-4404
ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...
Design/Logic Flaw
Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface JNDI, related to 1 a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response...
Analysis upload vulnerability-vulnerability warning-the black bar safety net
This article sent to the hacker line of Defense of 2006.4 period, reproduced please indicate the Analysis upload vulnerability in the form English / the loneliness of the hedgehog In a brief introduction through the injection vulnerability check and fill, following the coupling re-introduce a...
RMI Registry Detection
The remote host is running an RMI registry, which acts as a bootstrap naming service for registering and retrieving remote objects with simple names in the Java Remote Method Invocation RMI system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22227;...
Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net
Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus...
CVE-2003-1290
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface JNDI...
Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net
The author of the article: root webmasteratxfocus.org Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version:...
Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net
Affected by the anti - virusengine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus Personal Pro 4.5.0.104 Kaspersky Antivirus For MS NTServer 4.5.0.1...
DNS Zone Transfer (AXFR) Test - Active Check
The remote name server allows DNS zone transfers to be performed. SPDX-FileCopyrightText: 2005 [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2005-0395
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been revoked by its Candidate Numbering Authority CNA because it was initially assigned to a problem that was not a security issue. Notes: none...
Solaris 8 (sparc) : 116997-01
SunOS 5.8: Federated Naming Service FNS X500 patch. Date this patch was last updated by Sun : May/04/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...
CVE-2005-1518
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...
CVE-2005-1518
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...
CVE-2004-0567
The Windows Internet Naming Service WINS in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a...
Microsoft Windows Internet Naming Service (WINS) replication protocol contains a heap-based buffer overflow
Overview A buffer overflow vulnerability in the Microsoft Windows Internet Naming Service WINS replication protocol may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description The Microsoft WINS service maps IP addresses to NETBIOS computer names. WIN...