Gentoo Security Advisory GLSA 200507-08 (phpgroupware egroupware)

The remote host is missing updates announced in advisory GLSA 200507-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-15 (PHP)

The remote host is missing updates announced in advisory GLSA 200507-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft Host Integration Server Remote Command Execution (MS08-059; CVE-2008-3466)

Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. A remote code execution vulnerability has been...

FreeBSD Ports: python, python23, python22, python-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID 6afa87d3-764b-11d9-b0e7-0000e249a0a2 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Denial of service

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

CVE-2008-3838

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

CVE-2008-3838

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

CVE-2008-3838

CVE-2008-3838 affects Sun Solaris 10 and OpenSolaris prior to snv_88. The vulnerability resides in the NFS RPC zones implementation, enabling local administrators of non-global zones to read/modify NFS traffic across arbitrary non-global zones, potentially enabling file modifications or a denial ...

CVE-2008-3838: Improper Input Validation

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

Sun Solaris NFS RPC本地拒绝服务漏洞

BUGTRAQ ID:30853 CNCAN ID：CNCAN-2008082707 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFS远程过程调用域实现存在安全问题，本地拥有管理员权限的攻击者可以利用漏洞在非全局域中截获或破坏到其他非全局域的通信。 可对受此漏洞影响的非全局域的NFS服务进行拒绝服务攻击。目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv87 Sun OpenSolar...

The TrustedApplicationsFilter doesn't work for /rpc/* URLs

The sessioninview filter doesn't cover rpc URLs I think because this meant that RPC actions didn't show up in the DB until the response what completely written This means that lazily loaded data returned by the HibernateTrustedApplicationDao causes problems when the TrustedApplicationsFilter trie...

The TrustedApplicationsFilter doesn't work for /rpc/* URLs

The sessioninview filter doesn't cover rpc URLs I think because this meant that RPC actions didn't show up in the DB until the response what completely written This means that lazily loaded data returned by the HibernateTrustedApplicationDao causes problems when the TrustedApplicationsFilter trie...

The TrustedApplicationsFilter doesn't work for /rpc/* URLs

The sessioninview filter doesn't cover rpc URLs I think because this meant that RPC actions didn't show up in the DB until the response what completely written This means that lazily loaded data returned by the HibernateTrustedApplicationDao causes problems when the TrustedApplicationsFilter trie...

Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Preemptive Protection against Sun Solaris rpc.ypupdated Command Injection Vulnerability

A command injection vulnerability exists in Sun Solaris Network Information Service NIS. Sun Solaris provides its NIS services through the SUN-RPC remote procedure call RPC mechanism. A remote attacker may exploit this issue to inject and execute arbitrary code on a vulnerable system via a...

Wordpress XML-RPC接口非授权操作漏洞

BUGTRAQ ID: 27669 CVECAN ID: CVE-2008-0664 WordPress是一款免费的论坛Blog系统。 如果启用了注册的话，WordPress的XML-RPC实现（xmlrpc.php）就无法对页面所设置的posttype执行检查，这允许远程攻击者向论坛提交恶意请求更改编辑其他用户的张贴。 WordPress 2.3.2 临时解决方法： 禁止创建帐号，或临时删除xmlrpc.php文件。 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1601-1）以及相应补丁: DSA-1601-1：New wordpress...

DSA-1601-1 wordpress - several vulnerabilities

Bulletin has no description...

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Crysis games server DoS

NULL pointer dereference on oversized request to HTTP/XML-RPC interface...

Debian DSA-1597-2 : mt-daapd - multiple vulnerabilities

Three vulnerabilities have been discovered in the mt-daapd DAAP audio server also known as the Firefly Media Server. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2007-5824 Insufficient validation and bounds checking of the Authorization: HTTP...