CVE-2008-2681: Exposure of Sensitive Information to an Unauthorized Actor

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2682: Undefined Security Weakness

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realm CMS 2.3 - Multiple Vulnerabilities

realm CMS 2.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Realm CMS = 2.3 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin...

realm CMS 2.3 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

Cross site scripting

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

CVE-2008-0045

CVE-2008-0045 affects Apple Mac OS X 10.4.11: the AFP Server’s handling of Kerberos principal realm names contains an error that could allow remote attackers to bypass cross-realm authentication and establish unauthorized connections. The issue is documented among multiple vulnerabilities address...

Debian Security Advisory DSA 476-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 476-1. OpenVAS Vulnerability Test $Id: deb4761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 476-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 269-2 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-2. OpenVAS Vulnerability Test $Id: deb2692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 269-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 269-1. OpenVAS Vulnerability Test $Id: deb2691.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 269-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-269-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 476-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 476-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox “Basic Realm”基础认证头欺骗漏洞

BUGTRAQ ID: 27111 Firefox是一款开源的WEB浏览器。 Firefox会在所访问的Web服务器返回401状态代码时显示认证对话和WWW-Authenticate头。如果要指定基础认证，WWW-Authenticate头必须设置了Basic realm="XXX"值，然后会在认证对话窗口中显示Realm的值（也就是XXX）。 尽管Firefox不会显示双引号（"）后WWW-Authenticate头Realm值中的字符，但没有过滤单引号（'）和空格，因此攻击者就可以创建特制的Realm值，使认证对话看起来好像来自于可信任的站点，这样就可以执行网络钓鱼攻击。 Mozil...

Moderate: cyrus-sasl security and bug fix update

2.1.19-14 - Related: bz250732 Fixed a conflict with an earlier test patch 2.1.19-13 - Related: bz250732 Fixed uninitialized stack variable causing segfault 2.1.19-12 - Resolves: bz250732 sasl-sample-server crashes with null realm 2.1.19-11 - Resolves: bz243910 krb5-libs are not thread-safe -...

Moderate: cyrus-sasl security update

2.1.15-15 - Changed spec file to include the mech patch all the time. - Added patch to prevent printing null realm - Applied existing mech for 1.5 to 2.1 Related: rhbz189814 2.1.15-14 - temporarily back out the fixes for 157012, 190113 2.1.15-13 - add unapplied patches which make the DIGEST-MD5...

CVE-2007-0553: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...