418 matches found
Fedora Update for lighttpd FEDORA-2008-2262
Check for the Version of lighttpd OpenVAS Vulnerability Test Fedora Update for lighttpd FEDORA-2008-2262 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[security bulletin] HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service (DoS) or Arbitrary Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01599836 Version: 1 HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service DoS or Arbitrary Code Execution...
HP Secure Web Server / HP Internet Express for Tru64 UNIX memory corruption
No description provided...
hacking the mitsubishi GB-50A
Hi All, Well, it's been over 4 months since my plea for a security contact at Mitsubishi Electric to come forward. Since no one has, I thought I'd release a POC for hacking one. It's not exactly hard, the web controller uses a nasty set of Java applets to interact with itself. The shocking thing ...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-1.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
Authorization
Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List CRL authorization control and access secure web server instances running under an account different from that used for the admin server via...
[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is probably the most spread ASP based web portal script. I've found multiple XSS and Sql injection that could easily lead to password strealing or porta...
Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerability
Updated mailman packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of inval...
Moderate: Red Hat Security Advisory: : : : Updated secureweb packages available
Updated secureweb packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure Socke...
Important: Red Hat Security Advisory: : Updated secureweb packages available
Updated packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates close a potential security hole which would present clients with a listing of the contents of a directory instead of the contents of an index file or the proper error message. The previous revision of this...
Important: Red Hat Security Advisory: : Updated mailman packages available
Updated mailman packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.1...
[RHSA-2001:164-08] Updated secureweb packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated secureweb packages available Advisory ID: RHSA-2001:164-08 Issue date: 2001-12-05 Updated on: 2001-12-07 Product: Red Hat Secure Web Server Keywords: secureweb directory...
CVE-2000-0970
CVE-2000-0970 affects IIS 4.0 and 5.0 where ASP pages send the same Session ID cookie for secure and insecure sessions, enabling potential remote hijacking of a user’s secure session if they transition to insecure web traffic. The root cause is cookie marking across session contexts, leading to p...
IIS HACKING
Hi Folks, i have just compiled the well-known IIS tricks. I hope it will be helpful for securing your server. any comment,suggestion or insult...? wellcome MAB- SECURING IIS by BREAKING ===================================================== by Mount Ararat Blossom 9/15/2000...
CVE-1999-0829
HP Secure Web Console uses weak encryption...
CVE-1999-0829
The CVE-1999-0829 entry concerns HP Secure Web Console using weak encryption. Connected sources reinforce that the vulnerable software is HP Secure Web Console, with the underlying issue being weak encryption (no specific affected versions or fixes are provided). Practical impact is described as ...
CVE-1999-0829
HP Secure Web Console uses weak encryption...
PT-1999-1383 · Hewlett Packard · Hp Secure Web Console
Name of the Vulnerable Software and Affected Versions: HP Secure Web Console affected versions not specified Description: The issue is related to the use of weak encryption in HP Secure Web Console. Recommendations: At the moment, there is no information about a newer version that contains a fix...