Solaris 2.5.1 (sparc) : 108470-01

SunOS 5.5.1: Possible denial of service bug. Date this patch was last updated by Sun : Jan/18/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 106304-04

SunOS 5.6x86: /usr/lib/netsvc/yp/rpc.yppasswdd patch. Date this patch was last updated by Sun : Mar/11/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...

Solaris 2.5.1 (x86) : 104267-02

SunOS 5.5.1x86: inetd patch. Date this patch was last updated by Sun : Jul/12/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 9 (x86) : 114017-07

SunOS 5.9x86: tomcat security patch. Date this patch was last updated by Sun : May/27/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 8 (sparc) : 111504-02

SunOS 5.8: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid13373...

Solaris 8 (sparc) : 108987-19

SunOS 5.8: Patch for patchadd and patchrm. Date this patch was last updated by Sun : Nov/30/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 109202-06

SunOS 5.8: /kernel/misc/gld and /kernel/mi. Date this patch was last updated by Sun : Aug/27/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (x86) : 111233-01

SunOS 5.8x86: patch in.fingerd. Date this patch was last updated by Sun : Apr/25/01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 117000-05

SunOS 5.8: Kernel Patch. Date this patch was last updated by Sun : Apr/30/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 108919-30

CDE 1.4: dtlogin patch. Date this patch was last updated by Sun : May/04/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier

=========================================================================== =========================================================================== Advisory: 2004-Nuke-001 Affected Software: PHPNuke Affected Versions: Version 7.3 and earlier Main Developer: Francisco Burzi...

Bagle Worm Removal

The remote host had the Bagle worm installed. Nessus attempted to remove it by connecting to port 6777 of the host and using the built-in removal command. However, you should verify that : - The worm was removed properly - The remote host has not been altered in any other way. C Tenable Network...

CVE-2003-0470

Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...

Symantec ActiveX control vulnerable to buffer overflow

Overview There is a buffer overflow in a component of Symantec's web-based Security Check. Description Symantec describes Security Check as "a free web-based tool that enables users to test their computer's exposure to a wide range of on-line threats. As part of running the check, users may insta...

PHP 4.3.x - Undefined Safe_Mode_Include_Dir Safemode Bypass

PHP 4.3.x - Undefined SafeModeIncludeDir Safemode Bypass source: https://www.securityfocus.com/bid/8201/info PHP is prone to an issue that may allow programs to bypass Safe Mode by calling external files in restricted directories using include and require. The problem is known to occur when the...

CVE-2003-0470

The CVE-2003-0470 entry concerns the Buffer Overflow in the RuFSI Utility Class ActiveX control (the RuFSI Registry Information Class) used by Symantec Security Check. The vulnerability arises in the ActiveX control’s handling of a long argument to CompareVersionStrings, enabling remote code exec...

CVE-2003-0470

Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...

[Full-Disclosure] Symantec ActiveX control buffer overflow

Security Advisory Name: Symantec ActiveX control buffer overflow. Systems Affected : Symantec Security Check service. Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 06/23/03 Advisory Number: CC060304 Overview: Symantec has a free online service for virus and security scan...

blackicepro.txt

Hi! I'm using BlackICE PC Protection formerly known as BlackICE Defender for a very long time1, 2. It is one of my favorite hostbased intrusion detection systems and personal firewall for windows. During some tests for a paper on cross site scripting I've seen that there is an evasion possibility...

vSignup, vAuthenticate (PHP)

Informations : °°°°°°°°°°°°°° ----------------------- Product : vAuthenticate Version : 2.8 ----------------------- Product : vSignup Version : 2.1 ----------------------- Website : http://www.beanbug.net Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° chgpwd.php :...