7998 matches found
[security bulletin] SSRT4773 HP-UX xfs and stmkfont remote unauthorized access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01061 REVISION: 0 TITLE: SSRT4773 rev.0 HP-UX xfs and stmkfont remote unauthorized access NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...
serenaTeam.txt
Serena Software's TeamTrack Sensitive Content Disclosure Summary "Serena TeamTrack is a Web-architected, secure and highly configurable enterprise process management solution". We have discovered a security flaw with which a remote attacker can disclosure sensitive information off a TeamTrack...
Fedora Core 1 : ethereal-0.10.0a-0.1 (2003-040)
Serious issues have been discovered in the following protocol dissectors : - Selecting 'Match-Selected' or 'Prepare-Selected' for a malformed SMB packet could cause a segmentation fault. - It is possible for the Q.931 dissector to dereference a NULL pointer when reading a malformed packet. Impact...
OverByte ICS FTP Server - Remote Denial of Service
OverByte ICS FTP Server - Remote Denial of Service //--Exploit: //=========================================================== include include pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD...
FreeBSD : Midnight Commander buffer overflow during symlink resolution (107)
The following package needs to be updated: mc %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg322d4ff685c311d8a41f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...
Horde-Chora: Remote code execution
Background Chora is a PHP-based SVN/CVS repository viewer by the HORDE project. Description A vulnerability in the diff viewer of Chora allows an attacker to inject shellcode. An attacker can exploit PHP's file upload functionality to upload a malicious binary to a vulnerable server, chmod it as...
ProFTPD Access Control List bypass vulnerability
Background ProFTPD is an FTP daemon. Description ProFTPD 1.2.9 introduced a vulnerability that allows CIDR-based ACLs such as 10.0.0.1/24 to be bypassed. The CIDR ACLs are disregarded, with the net effect being similar to an "AllowAll" directive. Impact This vulnerability may allow unauthorized...
Pound format string vulnerability
Background Pound is a reverse proxy, load balancer and HTTPS front-end. It allows to distribute the load on several web servers and offers a SSL wrapper for web servers that do not support SSL directly. Description A format string flaw in the processing of syslog messages was discovered and...
OpenOffice.org vulnerability when using DAV servers
Background OpenOffice.org is an office productivity suite, including word processing, spreadsheets, presentations, drawings, data charting, formula editing, and file conversion facilities. Description OpenOffice.org includes code from the Neon library in functions related to publication on WebDAV...
Cross-realm trust vulnerability in Heimdal
Background Heimdal is a free implementation of Kerberos 5. Description Heimdal does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path. Impact Remote attackers with...
Sun Alert ID: 57454
Sunsm Alert Notification Sun Alert ID: 57454 Synopsis: Security Vulnerability Involving the passwd1 Command Category: Security Product: Solaris BugIDs: 4793719 Avoidance: Patch State: Resolved Date Released: 26-Feb-2004 Date Closed: 26-Feb-2004 Date Modified: 1. Impact A local unprivileged user m...
Host Fully Qualified Domain Name (FQDN) Resolution
Nessus was able to resolve the fully qualified domain name FQDN of the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12053; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/13"; scriptnameenglish:"Host Fully...
ISC InterNetNews (INN) contains buffer overflow in ARTpost() function
Overview The Internet Software Consortium's ISC InterNetNews INN is a Usenet application. A vulnerability in INN may permit a remote attacker to compromise the system. Description Version 2.4.0 of ISC's InterNetNews package contains a Network News Transfer Protocol NNTP server that contains a...
rsync: exploitable heap overflow
Background rsync is a popular file transfer package used to synchronize the Portage tree. Description Rsync version 2.5.6 contains a vulnerability that can be used to run arbitrary code. The Gentoo infrastructure team has some reasonably good forensic evidence that this exploit may have been used...
bind negative response cache poisoning
By spoofing negative reply it's possible to DoS name resolution while spoofed reply doesn't expire from cash...
Midnight Commander buffer overflow during symlink resolution
Midnight Commander uses a fixed sized stack buffer while resolving symbolic links within file archives tar or cpio. If an attacker can cause a user to process a specially crafted file archive with Midnight Commander, the attacker may be able to obtain the privileges of the target user...
VulnCheck KEV: CVE-2002-0649
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 MSDE allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which 1 a 0x04 byte that causes the SQL Monitor thread to...
CGI bugs
No description provided...