529 matches found
python -- SimpleXMLRPCServer.py allows unrestricted traversal
According to Python Security Advisory PSF-2005-001, The Python development team has discovered a flaw in the SimpleXMLRPCServer library module which can give remote attackers access to internals of the registered object or its module or possibly other modules. The flaw only affects Python XML-RPC...
Konqueror fails to restrict access to Java classes
Overview The Konqueror web browser may allow Java applets and JavaScripts to bypass the Java security settings and access restricted Java classes. Exploitation may allow a remote attacker to read and write arbitrary files on a vulnerable system. Description Konqueror is a web browser and file...
DEBIAN-CVE-2004-1471
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a wrapper line...
Apache 2, mod_ssl: Bypass of SSLCipherSuite directive
Background The Apache HTTP server is one of the most popular web servers on the internet. modssl provides SSL v2/v3 and TLS v1 support for Apache 1.3 and is also included in Apache 2. Description A flaw has been found in modssl where the "SSLCipherSuite" directive could be bypassed in certain...
3Com 3CRADSL72 ADSL Wireless Router - Information Disclosure Authentication Bypass
3Com 3CRADSL72 ADSL Wireless Router - Information Disclosure Authentication Bypass source: https://www.securityfocus.com/bid/11408/info 3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose...
3Com 3CRADSL72 ADSL Wireless Router - Information Disclosure / Authentication Bypass
source: https://www.securityfocus.com/bid/11408/info 3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose sensitive information such as the router name, primary and secondary DNS servers,...
DUforum 3.x - Login Form Password SQL Injection
DUforum 3.x - Login Form Password SQL Injection source: https://www.securityfocus.com/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access ...
DUclassified 4.x - 'adDetail.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's account. DUclassmate may allow...
Debian DSA-534-1 : mailreader - directory traversal
A directory traversal vulnerability was discovered in mailreader whereby remote attackers could view arbitrary files with the privileges of the nph-mr.cgi process by default, www-data via relative paths and a null byte in the configLanguage parameter. %NASLMINLEVEL 70300 C Tenable Network Securit...
Debian DSA-233-1 : cvs - doubly freed memory
Stefan Esser discovered a problem in cvs, a concurrent versions system, which is used for many Free Software projects. The current version contains a flaw that can be used by a remote attacker to execute arbitrary code on the CVS server under the user id the CVS server runs as. Anonymous read-onl...
BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities
BBS E-Market Professional bf130 1.3.0 - Multiple File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/11191/info BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data....
BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/11191/info BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. A remote attacker can disclose arbitrary Web-readable files by supplying directo...
Turbo Seek tseekdir.cgi location Parameter Arbitrary File Access
The remote host is running Turbo Seek, a search engine and directory tool. The version of this software running on the remote host has a vulnerability that allows a remote attacker to read arbitrary files from the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2003-0043
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file...
CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...
phpBugTracker 0.9 - 'bug.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...
HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal
HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal source: https://www.securityfocus.com/bid/9972/info It has been reported that HP Web JetAdmin may be prone to a directory traversal vulnerability allowing remote attackers to access information outside the server root directory. Th...
Apache Cygwin 1.3.x/2.0.x - Directory Traversal
source: https://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only reported to present itself in Apache running on...
Multiple Real media players fail to properly validate SMIL files
Overview Multiple Real media players fail to properly validate synchronized multimedia integration language SMIL files which may permit a remote attacker to gain sensitive information. Description RealNetworks Real media players are multimedia applications that allow users to view local and remot...
