Web Server Virtual Host Detection (Realtime Alert)

Binary data 7033.pasl...

RedHat Security Advisory RHSA-2009:1540

The remote host is missing updates to kernel-rt packages announced in advisory RHSA-2009:1540. For details on the issues addressed in this update, please visit the referenced security advisories. These updated packages also include bug fixes and enhancements. Users are directed to the Realtime...

RedHat Security Advisory RHSA-2009:1540

The remote host is missing updates to kernel-rt packages announced in advisory RHSA-2009:1540. For details on the issues addressed in this update, please visit the referenced security advisories. These updated packages also include bug fixes and enhancements. Users are directed to the Realtime...

Webmedia Explorer Detection

This host is running Webmedia Explorer, a free Open Source PHP engine that reads your hard disc as a conventional disc explorer and generates a website realtime taking advantage of a very powerful rendering and data fetching caching system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text...

Design/Logic Flaw

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwdchange action...

CVE-2009-1595

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwdchange action...

CVE-2009-1596

Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password aka canChangePassword console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwdchange IQ packet...

CVE-2009-1596

CVE-2009-1596 affects Ignite Realtime Openfire prior to 3.6.5. The register.password (canChangePassword) console setting is not properly enforced, allowing remote authenticated users to bypass the intended policy and change their own passwords via a passwd_change IQ packet. The vulnerability enab...

CVE-2009-1595

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwdchange action...

CVE-2009-1596

Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password aka canChangePassword console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwdchange IQ packet...

CVE-2009-1595

The CVE-2009-1595 issue affects Ignite Realtime Openfire, where the jabber:iq:auth implementation in IQAuthHandler.java on versions before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts by modifying the username element in a passwd_change action. This enable...

FreeBSD Security Advisory (FreeBSD-SA-09:06.ktimer.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:06.ktimer.asc ADV FreeBSD-SA-09:06.ktimer.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:06.ktimer.asc Authors: Thomas Reinke Copyright: Copyright c 2009...

iPhone security comes to the fore

By Paul F. Roberts, The 451 Group The security of smartphones such as the iPhone, Windows Mobile devices and the T-Mobile G1 has come under a lot of scrutiny lately. Each device has its own unique security model, and in the case of the iPhone, Apple has kept its platform closed to third-party...

FreeBSD-SA-09:06.ktimer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:06.ktimer Security Advisory The FreeBSD Project Topic: Local privilege escalation Category: core Module: kern Announced: 2009-03-23 Affects: FreeBSD 7.x...

CVE-2009-0497

Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...

Directory traversal

Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...

CVE-2009-0497

CVE-2009-0497 is an Openfire vulnerability (Openfire 3.6.2 and affected builds) where the log.jsp component fails to validate the log parameter, allowing a remote attacker to perform a directory traversal (via ..) and read arbitrary files on the server. The issue is caused by improper input valid...

CVE-2009-0497

Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the log parameter...

CVE-2009-0496

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...