HP JetDirect rev. G.08.x/rev. H.08.x/x.08.x/J3111A LCD Display Modification Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2245/info Certain versions of HP JetDirect enabled printers provide a function PJL command that changes the LCD display on a printer over TCP/IP. Arbitrary strings can be sent to the LCD display by a remote user using thi...

Conectiva 4.x/5.x,RedHat 6.x pam_console Remote User Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1513/info There is a vulnerability in the Linux pamconsole module that could allow an attacker to remotely reboot the workstation or perform other actions limited to local users. If a workstation is configured to use a...

TinyServer 1.1 - Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...

Martin Hamilton ROADS 2.3 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2371/info A remote user could gain read access to known files outside of the root directory where Martin Hamilton ROADS resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename...

Advanced Poll 2.0 - Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7171/info It has been reported that an information disclosure vulnerability exists in Advanced Poll. Because of this, a remote user to potentially access privileged information that could lead to further attack against th...

SSH 1.2.30 Daemon Logging Failure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2345/info SSH1 is the implementation of the Secure Shell communication protocol by SSH Communications. SSH1 is version 1 of the protocol specified by IETF draft to protect the integrity of traffic over the network. A...

Softwin BitDefender AvxScanOnlineCtrl COM Object Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10175/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote user to execute a method in the offending...

Netscape Enterprise Web Server for Netware 4/5 5.0 Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/4874/info It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user. Netscape Enterprise Web Server for Netware contain several sample files which leak system...

phpix 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1773/info PHPix is a web-based photo-album system written in PHP. It is vulnerable to an attack that allows a malicious remote user to view arbitrary files on the target webserver with the privileges of the webserver. The...

etomite 1.1 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22710 Reference: http://www.htbridge.ch/advisory/sqlinjectioninetomite.html Product: Etomite Vendor: http://www.etomite.org/ http://www.etomite.org/ Vulnerable Version: 1.1 Vendor Notification: 18 November 2010 Vulnerability Type: SQL...

AV Tutorial Script 1.0 - Remote User Pass Change Exploit

No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

Kootenay Web Inc whois 1.0 - Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a...

Debian Linux 2.1,Linux kernel 2.2/2.3,RedHat Linux 6.0,S.u.S.E. Linux 6.1 IP Options Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/302/info A vulnerability in the Linux Kernel's IPv4 option processing may allow a remote user to crash the system. The vulnerability is the result of the kernel freeing a socket buffer when it shouldn't while sending an...

BRS WebWeaver 1.0 1 MKDir Directory Traversal Weakness

No description provided by source. source: http://www.securityfocus.com/bid/6585/info WebWeaver's FTP component has a flaw which can permit a remote user to create directories outside the FTP root. By executing the mkdir command on an ftp server with dot-dot-slash ..\ directory traversal notation...

Sean MacGuire Big Brother 1.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system. Executing a GET...

PostNuke Phoenix 0.72x Rating System Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...

Rediff Bol 2.0.2 URL Handling Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6670/info It has been reported that a problem in Rediff Bol may allow remote users to log other users out of the Bol chat client. Due to improper handling of some types of requests, a remote user could send an URL request...

YABB 1.4.1 SE Reminder.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6591/info It has been reported that a problem exists in the Reminder.php script distributed as part of YaBB SE. Due to insufficient sanitizing of input, it is possible for a remote user to inject arbitrary SQL into the...

Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3445/info Due to a flaw in the implementation of RDP in Windows 2000/NT Terminal Server, it is possible for a remote user to cause a host to stop responding. Sending malformed RDP packets to a host could cause a denial of...

MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...