199 matches found
CVE-2012-0059 Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the...
RHEL 5 / 6 : Red Hat Network Proxy spacewalk-backend (RHSA-2012:0102)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0102 advisory. Red Hat Network RHN Proxy provides a mechanism for caching content, such as package updates from Red Hat or custom content created for an...
[SECURITY] Fedora 18 Update: awstats-7.0-11.fc18
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
LogToServer action lets anyone log messages to the server log
Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...
LogToServer action lets anyone log messages to the server log
Available without authentication. This can be used to hide breakin attempts or fill the disk if no log rotation is in place...
Oracle WebLogic Server Unspecified Information Disclosure (CVE-2008-2578)
According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified, local information disclosure vulnerability in the WebLogic console or server log. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
[SECURITY] Fedora 16 Update: awstats-7.0-5.fc16
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
[SECURITY] Fedora 15 Update: awstats-7.0-5.fc15
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
CVE-2011-2758: Improper Authentication
IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...
WhiteCat logcleaner version 1.0 [edition]
Данная утилита предназначена для системных администраторов для: 1. Контроля размера лог-файлов на сервере 2. Для проверки на уязвимость своего сервера на возможность доступа к лог-файлам сервера Любое иное использование скрипта преследуется по закону Клинеры все эти конечно круто, но во многих по...
Cisco Application Control Engine (ACE) - HTTP Parsing Security
source: https://www.securityfocus.com/bid/40002/info Cisco Application Control Engine ACE is prone to a security weakness that may allow attackers to obfuscate HTTP server log entries. Attackers can exploit this issue to avoid having client IP addresses logged by servers. GET / HTTP / 1 . 1 HOST:...
GeFest Web HomeServer 1.0 Directory Traversal
|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...
[SECURITY] Fedora 10 Update: awstats-6.95-1.fc10
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
[SECURITY] Fedora 12 Update: awstats-6.95-1.fc12
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
Log Rover pword Parameter SQL Injection
The remote host is running Log Rover, an ASP application for analyzing web server log files. The web interface included with the version of Log Rover installed on the remote host fails to sanitize user-supplied input to the 'pword' parameter of the 'login.asp' script before using it to construct...
SonicWALL format string vulnerability
Format stirng vulnerability on server log parsing and during authentication...
ejabberd crossite scripting
Crossite scripting with server log...
Fedora Update for awstats FEDORA-2008-10938
Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10938 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 8 Update: awstats-6.8-2.fc8
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
XM Easy Personal FTP Server 5.4.0 (XCWD) Denial of Service Exploit
No description provided by source. !/usr/bin/python XM Easy Personal FTP Server 5.4.0 XCWD DoS When admin looks at the server log, application crashes : Elhamdulillahi Rabbil-alemin! bt ./sploit.py + Saljemo zli bafer : + Now wait until the admin looks at server log : + Finito!...