2902 matches found
[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog
According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...
kolab cleartext password
OpenLDAP passwowrd is stored in world-readable file as cleratext...
CVE-2003-0618
...
[waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]
================================================================================ waraxe-2004-SA026 ================================================================================ Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke...
CGI bugs
No description provided...
Vulnerabilities in SNMP Message Processing
...
DSA-487 neon - format string
Bulletin has no description...
Cisco IPSec Malformed IKE Packet Vulnerability
...
waraxe-2004-SA015.txt
================================================================================ waraxe-2004-SA015 ================================================================================ Multiple vulnerabilities in NukeCalendar v1.1.a...
1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting
source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...
Insecure sandbox temporary lockfile vulnerabilities in Portage
Background Portage is Gentoo's package management system which is responsible for installing, compiling and updating any ebuilds on the system through the Gentoo rsync tree. Under default configurations, most ebuilds run under a sandbox which prevent the build process writing to the "real" system...
PhotoPost 4.6 - Multiple Vulnerabilities
PhotoPost 4.6 - Multiple Vulnerabilities PhotoPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc Product: PhotoPost Version: = 4.6 Website: http://www.photopost.com/ BID: 9994 CVE: CVE-2004-1870 CVE-2004-1871 OSVDB: 10261 10262 10263 10264 10265 10266 10267 4771 SECUNIA: 11241 Description:...
CVE-2003-0987
...
Apache Tomcat Default Files
The default error page, default index page, example JSPs and/or example servlets are installed on the remote Apache Tomcat server. These files should be removed as they may help an attacker uncover information about the remote Tomcat install or host itself. C Tenable Network Security, Inc. Based ...
Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities
...
CVE-2003-0949
...
UltraVNC privilege escalation
For online help Internet Explorer is launched with system privileges...
CGI bugs
No description provided...
MetaDot Portal Server 5.6.x - index.pl Information Disclosure
source: https://www.securityfocus.com/bid/9439/info A number of vulnerabilities have been found in all version of MetaDot Corporation's MetaDot Portal Server. Due to a failure of the software to properly validate user input, an attacker may be able to corrupt data, force the server to disclose...