Contents-Mall vulnerability in password handling

Overview Contents-Mall contains a vulnerability in the way it handles passwords. Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information...

JVN#53293565: Contents-Mall vulnerability in password handling

Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information stored by the software may be viewed or altered. Solution Updatethe software Update...

CVE-2010-2813

SquirrelMail’s imap_general.php vulnerability (CVE-2010-2813) affects versions prior to 1.4.21, where 8-bit password handling allows remote attackers to trigger a denial of service (disk consumption) by issuing numerous IMAP login attempts with different usernames, causing many preferences files ...

OpenTTD Multiple Security bypass vulnerabilities

OpenTTD is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenTTD Multiple Security bypass vulnerabilities

This host is installed with OpenTTD and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenttdmultsecbypassvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD Multiple Security bypass vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

openSUSE Security Update : moodle (moodle-1933)

This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...

openSUSE Security Update : moodle (moodle-1933)

This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...

openSUSE Security Update : qemu (qemu-691)

qemu update to version 0.10.1 fixes the following security issues : CVE-2008-0928: problems with range checks of block devices CVE-2008-1945: problems with removable media handling CVE-2008-2382: vnc server DoS CVE-2008-4539: fix a heap overflow in the cirrus VGA implementation CVE-2008-5714: off...

USN-645-3: Firefox and xulrunner regression

USN-645-1 fixed vulnerabilities in Firefox and xulrunner. The upstream patches introduced a regression in the saved password handling. While password data was not lost, if a user had saved any passwords with non-ASCII characters, Firefox could not access the password database. This update fixes t...

Debian Security Advisory DSA 1518-1 (backup-manager)

The remote host is missing an update to backup-manager announced via advisory DSA 1518-1. OpenVAS Vulnerability Test $Id: deb15181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1518-1 backup-manager Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Debian DSA-1516-1 : dovecot - privilege escalation

Prior to this update, the default configuration for Dovecot used by Debian runs the server daemons with group mail privileges. This means that users with write access to their mail directory on the server for example, through an SSH login could read and also delete via a symbolic link mailboxes...

Debian Security Advisory DSA 212-1 (mysql)

The remote host is missing an update to mysql announced via advisory DSA 212-1. OpenVAS Vulnerability Test $Id: deb2121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 212-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Georgia SoftWorks SSH2 Server多个远程代码执行漏洞

BUGTRAQ ID: 27103 GSW SSH2 Server是使用在Windows平台下的SSH2/Telnet服务程序。 GSW SSH2 Server在处理畸形用户数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 ------------------------------------ A 日志函数格式串和缓冲区溢出 ------------------------------------ GSW...

Hardcoded credentials

iOpus Secure Email Attachments SEA, probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring...

CVE-2006-2036

CVE-2006-2036 affects iOpus Secure Email Attachments (SEA) 1.0. Root cause: improper handling of passwords that are repetitions of a substring, enabling an attacker to decrypt files by entering only the substring. Impact: partial confidentiality. No remediation details are provided in the supplie...

CVE-2006-2036

iOpus Secure Email Attachments SEA, probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring...

Posible security bug in phpMyWebhosting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all. There is a posible security bug in the phpMyWebhosting http://sourceforge.net/projects/phpmywebhosting/ File: includes/functions/pmwh.php Function: test Code: - ------------------------------------------------------------------------ ...... if...

mysql.authentication.bypass_client.c.diff

1941,1956c1941,1942 servercapabilities & CLIENTSECURECONNECTION scramble, passwd; scramble, passwd; sprintfend,"\x14\x00"; end+=2;...

Buffer overflow in pam_smb password handling

Applications utilizing pamsmb can be compromised by any user who can enter a password. In many cases, this is a remote root compromise...

MySQL sql_acl.cc get_salt_from_password Function Password Handling Remote Overflow

According to its banner, the version of MySQL installed on the remote host fails to validate the length of a user-supplied password in the 'User' table in the 'getsaltfrompassword' function. Using a specially crafted value for a new password, an authenticated attacker with the 'ALTER DATABASE'...