USN-66-2: PHP vulnerability

Ubuntu Security Notice USN-66-1 described a circumvention of the "openbasedir" restriction by using the cURL module. Adam Conrad discovered that the fix from USN-66-1 still allowed to bypass this restriction with certain variants of path specifications. In addition this update fixes the crash of...

XGB 2.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/12489/info xGB is reportedly affected by a vulnerability that could permit unauthorized administrator access. This issue is due to the application failing to properly verify user credentials. A malicious user could exploit this vulnerability to bypass use...

[Full-Disclosure] [USN-36-1] NFS statd vulnerability

=========================================================== Ubuntu Security Notice USN-36-1 December 01, 2004 nfs-utils vulnerability CAN-2004-1014 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog The...

FreeBSD : p5-Archive-Zip -- virus detection evasion (134)

The following package needs to be updated: p5-Archive-Zip %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga5742055300a11d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyrigh...

FreeBSD : rssh -- format string vulnerability (166)

The following package needs to be updated: rssh %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg1f82675726be11d9ad2d0050fc56d258.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

FreeBSD : xv -- exploitable buffer overflows (211)

The following package needs to be updated: xv-m17n %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgfffacc9316cb11d9bc4a000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : tiff -- multiple integer overflows (193)

The following package needs to be updated: fractorama %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3897a2f81d5711d9bc4a000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : sudo -- sudoedit information disclosure (189)

The following package needs to be updated: sudo %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga268ef4a0b3511d98a8a000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

FreeBSD : mpg123 buffer overflow (119)

The following package needs to be updated: mpg123-esound %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg15e0e96302ed11d9a20900061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : gnomevfs -- unsafe URI handling (60)

The following package needs to be updated: gnomevfs2 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg7884d56ff7a111d89837000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

SNMP xyzzy Community String (deprecated)

Binary data 1394.prm...

SNMP cisco Community String (deprecated)

Binary data 1405.prm...

SNMP cascade Community String (deprecated)

Binary data 1416.prm...

SQL Server Cleartext 'sa' Account 'sql' Password Authentication (deprecated)

Binary data 1131.prm...

SQL Server Cleartext 'sa' Account 'password' Password Authentication (deprecated)

Binary data 1123.prm...

Mozilla FTP View URL Title Tag XSS (deprecated)

Binary data 1315.prm...

SNMP cc Community String (deprecated)

Binary data 1415.prm...

SNMP snmpd Community String (deprecated)

Binary data 1381.prm...

FreeBSD : cvs -- numerous vulnerabilities (29)

The following package needs to be updated: FreeBSD %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgd2102505f03d11d881b0000347a4fa7d.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : popfile file disclosure (152)

The following package needs to be updated: popfile %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg12c7b7aeec9011d8b913000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...