Solaris 2.5.1 (sparc) : 106149-09

The remote host is missing Sun Security Patch number 106149-09 SEA 1.0.2: DMI Server provider. Date this patch was last updated by Sun : Thu Nov 12 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated a...

Supported SmartDefense and Web Intelligence Protections for VPN-1 VSX NGX Gateways

VPN-1 VSX provides a set of virtual components acting as real network devices such as Firewall gateways, routers, switches, and network cables. Using these virtual components, network topologies are created that are functionally equivalent to networks built with physical devices. Each Virtual...

CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

CVE-2006-3968 affects Sun Solaris 10 (3/05 HW2) on Sun Fire T2000 platforms. The crypto provider fails to correctly verify DSA signatures, which might allow data modification to go undetected. Root cause is incorrect DSA signature verification in the Solaris crypto provider when running on affect...

Exploit Labs Security Advisory 2006.4

EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...

[Full-disclosure] phpFormGenerator

EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...

CVE-2005-4760

The CVE affects BEA WebLogic Server and WebLogic Express: versions 8.1 SP3 and earlier, and 7.0 SP5 and earlier, where fullyDelegatedAuthorization is enabled for a servlet. The issue is that if authorization or the role providers fail, servlet deployment may not fail as intended, potentially leav...

CVE-2006-0423

BEA WebLogic Portal 8.1 through SP3 stores the RDBMS Authentication provider password in cleartext in config.xml, allowing privilege escalation. Affected component: WebLogic Portal configuration for RDBMS auth. Root cause: cleartext password storage in config.xml. Impact: partial confidentiality ...

CVE-2006-0429

BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions...

[SA18593] BEA WebLogic Portal Information Disclosure and Security Bypass

TITLE: BEA WebLogic Portal Information Disclosure and Security Bypass SECUNIA ADVISORY ID: SA18593 VERIFY ADVISORY: http://secunia.com/advisories/18593/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of system information, Exposure of sensitive information WHERE: From remote...

CVE-2005-4760

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization is enabled for a servlet, does not cause servlet deployment to fail when failures occur in authorization or role providers, which might prevent the servlet from being "fully...

MUP overlong request kernel overflow Patch (Q311967)

Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced...

Intrusion.com SecureNet Provider Detection (HTTP)

The remote host appears to run the Intrusion.com SecureNet provider on this port. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

[Full-disclosure] [ Suresec Advisories ] - Several MacOS X vulnerabilities

Buffer overflow in ping and traceroute. Vulnerability summary: The ping and traceroute programs used in Mac OS X are vulnerable to a buffer overflow when resolving a hostname. In the case of ping a hostname gets copied into a static buffer which is 80 bytes long. For traceroute the hostname gets...

Intrusion.com SecureNet Provider Detection

The remote host appears to run the Intrusion.com SecureNet provider on this port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18533; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/06/12"; scriptnameenglish:"Intrusion.com...

CVE-2005-1743

BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions...

CVE-2005-1743

CVE-2005-1743 affects BEA WebLogic Server/Express versions 8.1 (SP3) and 7.0 (SP5). The root cause: when a security provider throws an exception, WebLogic may use an incorrect thread identity and may fail to audit security exceptions. Implications noted: potential partial impact on confidentialit...

CVE-2004-0715

The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group membe...

CVE-2004-0715

The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group membe...