Ubuntu 4.10 / 5.04 : util-linux vulnerability (USN-184-1)

David Watson discovered that 'umount -r' removed some restrictive mount options like the 'nosuid' flag. If /etc/fstab contains user-mountable removable devices which specify the 'nosuid' flag which is common practice for such devices, a local attacker could exploit this to execute arbitrary...

CVE-2005-4487

Cross-site scripting XSS vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter...

CVE-2005-4487

RAMSite R|1 CMS 1.0 and earlier is affected by a cross-site scripting (XSS) vulnerability. The issue arises in the searchfield parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is user-facing script execution, with potential credential or session-related implicat...

CVE-2005-4487

Cross-site scripting XSS vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter...

CVE-2005-4487: Undefined Security Weakness

Cross-site scripting XSS vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter...

CVE-2005-4488: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 iid, 2 iid2, 3 r, 4 cart, 5 str, 6 nf, and 7 a parameters...

RAMSite R|1 CMS XSS vuln.

RAMSite R|1 CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html vendor:http://ramsiter1.imikalsen.com/ affected version:1.0 and prior Product Description: The RAMSite R|1 CMS is an advanced, yet easy to use a...

HP-UX PHNE_33790 : s700_800 11.00 r-commands cumulative mega-patch

s700800 11.00 r-commands cumulative mega-patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability hs been identified with HP-UX systems running in Trusted Mode. The vulnerability could be exploited remotely to gain unauthorized access. HPSBUX02072...

CVE-2005-2876: Undefined Security Weakness

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

SAP R/3 Internet Graphics Server directory traversal

Directory traversal on accesing htdocs folder...

CVE-2002-1794: Undefined Security Weakness

Unknown vulnerability in pamauthz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users...

CVE-2002-1752: Improper Control of Generation of Code

csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function...

CVE-1999-1573

Multiple unknown vulnerabilities in the "r-cmnds" 1 remshd, 2 rexecd, 3 rlogind, 4 rlogin, 5 remsh, 6 rcp, 7 rexec, and 8 rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files...

CVE-1999-1580

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable and passing crafted values to the -oR option...

CVE-1999-1573

CVE-1999-1573 covers multiple unknown vulnerabilities in HP-UX 10.00–11.00 r-commands (rshd, rexecd, rlogind, rlogin, remsh, rcp, rexec, rdist). The description indicates attackers could gain privileges or access files via these remote commands, but no concrete root-cause, affected versions beyon...

CVE-1999-1573: Undefined Security Weakness

Multiple unknown vulnerabilities in the "r-cmnds" 1 remshd, 2 rexecd, 3 rlogind, 4 rlogin, 5 remsh, 6 rcp, 7 rexec, and 8 rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files...

CVE-2002-1578

The default installation of SAP R/3, when using Oracle and SQLnet V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected...

CVE-2002-1577

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...

CVE-2003-1035

The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does...

CVE-2002-1577

CVE-2002-1577 concerns SAP R/3 versions 2.0B to 4.6D, where multiple clients are installed with default user accounts and passwords. The underlying issue is insecure default credentials that allow remote attackers to gain privileges via accounts such as SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM...