Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007; CVE-2003-0109)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...

ntp-info NSE Script

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a "read variables" opcode 2 control message. Without verbosity, the script shows the time and the value of the version, processor, system, refid, and stratum variables. With verbosity, all...

TCP may keep its offered receive window closed indefinitely (RFC 1122)

Overview Part of the Transmission Control Protocol TCP specification RFC 1122 allows a receiver to advertise a zero byte window, instructing the sender to maintain the connection but not send additional TCP payload data. The sender should then probe the receiver to check if the receiver is ready ...

PHP "multipart/form-data" denial of service

Description ------------ PHP version 5.3.1 was just released. This release contains a patch for a denial of service condition we've reported on 27 October 2009. The problem is related with PHP's handling of RFC 1867 Form-based File Upload in HTML. When you send a POST request to a PHP script with...

MDaemon Content Filter Directory Traversal

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. MDaemon provides Content Filter functionality to filter incoming email messages based on the headers and message content. RFC 2183 defines header fields in a...

[SECURITY] Fedora 11 Update: cyrus-imapd-2.3.15-1.fc11

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

Robert "Rsnake" Hansen On Slowloris, DoS Attacks And RFC-1918 Networks

Dennis Fisher talks with Robert “Rsnake” Hansen about his Slowloris tool, low-bandwidth DoS attacks and the law of unintended consequences. Download SHOW NOTES: Mitigating the Slowloris HTTP DoS Attack New attack class exploits intranet weaknesses Subscribe to the Digital Underground podcast on...

imap-capabilities NSE Script

Retrieves IMAP email server capabilities. IMAP4rev1 capabilities are defined in RFC 3501. The CAPABILITY command allows a client to ask a server what commands it supports and possibly any site-specific policy. Script Arguments smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See...

HP-UX Update for Advanced Server/9000 for HP-UX (AS/U) RFC-Netbios HPSBUX00198

Check for the Version of Advanced Server/9000 for HP-UX AS/U RFC-Netbios OpenVAS Vulnerability Test HP-UX Update for Advanced Server/9000 for HP-UX AS/U RFC-Netbios HPSBUX00198 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This progr...

HP-UX Update for Advanced Server/9000 for HP-UX (AS/U) RFC-Netbios HPSBUX00198

Check for the Version of Advanced Server/9000 for HP-UX AS/U RFC-Netbios OpenVAS Vulnerability Test HP-UX Update for Advanced Server/9000 for HP-UX AS/U RFC-Netbios HPSBUX00198 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Fedora 10 : mapserver-5.2.2-1.fc10 (2009-3357)

The releases contain fixes for issues discovered in an audit of the CGI by a 3rd party tickets 2939, 2941, 2942, 2943 and 2944. The issues are detailed at: http://trac.osgeo.org/mapserver/ticket/2939 http://trac.osgeo.org/mapserver/ticket/2941 http://trac.osgeo.org/mapserver/ticket/2942...

Fedora Core 9 FEDORA-2009-3383 (mapserver)

The remote host is missing an update to mapserver announced via advisory FEDORA-2009-3383. OpenVAS Vulnerability Test $Id: fcore20093383.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3383 mapserver Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 10 FEDORA-2009-3357 (mapserver)

The remote host is missing an update to mapserver announced via advisory FEDORA-2009-3357. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 9 FEDORA-2009-3383 (mapserver)

The remote host is missing an update to mapserver announced via advisory FEDORA-2009-3383. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

AST-2009-003: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | SIP responses expose valid usernames |...

Fedora 9 : mapserver-5.2.2-1.fc9 (2009-3383)

The releases contain fixes for issues discovered in an audit of the CGI by a 3rd party tickets 2939, 2941, 2942, 2943 and 2944. The issues are detailed at: http://trac.osgeo.org/mapserver/ticket/2939 http://trac.osgeo.org/mapserver/ticket/2941 http://trac.osgeo.org/mapserver/ticket/2942...

CentOS Update for httpd CESA-2008:0006 centos4 x86_64

Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2008:0006 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for rsyslog FEDORA-2008-11476

Check for the Version of rsyslog OpenVAS Vulnerability Test Fedora Update for rsyslog FEDORA-2008-11476 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-0417

Cross-site scripting XSS vulnerability in the AgaviWebRouting::gennull method in Agavi 0.11 before 0.11.6 and 1.0 before 1.0.0 beta 8 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with certain characters that are not properly handled by web browsers that do not...