popper_mod PHP Administration Script Authentication Bypass

It is possible to administrate the remote poppermod CGI by requesting the /admin directory directly. An attacker may use this flaw to obtain the passwords of your users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

WU-FTPD Unspecified Security Issue

The version of WU-FTPD running on the remote host has an unspecified remote vulnerability. This is reportedly due to an unspecified bug in glob.c discovered by the SuSE security team. Nessus verified this vulnerability by looking at the banner of the remote FTP server. C Tenable Network Security,...

Cisco VPN 3000 Concentrator HTML Source Plaintext User Password Disclosure (CSCdv88230, CSCdw22408)

The remote VPN concentrator discloses the passwords of its users in the source HTML of the embedded web server. This vulnerability is documented as Cisco bug ID CSCdv88230 and CSCdw22408. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

[SECURITY] [DSA 255-1] New tcpdump packages fix denial of service vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 255-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2003 http://www.debian.org/security/faq -...

Oracle TO_TIMESTAMP_TZ Remote System Buffer Overrun (#NISR16022003b)

NGSSoftware Insight Security Research Advisory Name: Oracle TOTIMESTAMPTZ Remote System Buffer Overrun Systems Affected: All platforms; Oracle9i Database Release 2, 9i Release 1, 8i, 8.1.7, 8.0.6 Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.oracle.com Author:...

[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 251-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 250-1] New w3mmee-ssl packages fix cookie information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 250-1 [email protected] http://www.debian.org/security/ Martin Schulze February 12th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 248-1 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 248-1 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 247-1] New courier packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 247-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 246-1] New tomcat packages fix information exposure and cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 246-1 [email protected] http://www.debian.org/security/ Martin Schulze January 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 244-1] New noffle packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 244-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2003 http://www.debian.org/security/faq -...

Advisory 01/2003: CVS remote vulnerability

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: CVS remote vulnerability Release Date: 2003/01/20 Last Modified: 2003/01/20 Author: Stefan Esser [email protected] Application: CVS = 1.11.4 Severity: A vulnerability within CVS allows remote compromise of CVS servers. Risk:...

[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 233-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 228-1] New libmcrypt packages fix buffer overflows and memory leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 228-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

[INetCop Security Advisory] Remote format string vulnerability in Tanne.

======================================== INetCop Security Advisory 2003-0x82-012 ======================================== Title: Remote format string vulnerability in Tanne. 0x01. Description About: tanne is a small, secure session-management solution for HTTP. It replaces common sessions with a...

[SECURITY] [DSA 223-1] New geneweb packages fix information exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 223-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 223-1] New geneweb packages fix information exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 223-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 222-1] New xpdf packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 222-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2003 http://www.debian.org/security/faq -...