[SA12960] IPplan Unspecified SQL Injection Vulnerabilities

TITLE: IPplan Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12960 VERIFY ADVISORY: http://secunia.com/advisories/12960/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From local network SOFTWARE: IPplan 3.x http://secunia.com/product/4131/ DESCRIPTION: Some...

DSA-573-1 cupsys - integer overflows

Bulletin has no description...

DSA-570-1 libpng - integer overflow

Bulletin has no description...

DSA-569-1 netkit-telnet-ssl - invalid free(3)

Bulletin has no description...

DSA-565-1 sox - buffer overflows

Bulletin has no description...

DSA-564-1 mpg123 - missing user input sanitising

Bulletin has no description...

ocPortal index.php req_path Parameter Remote File Inclusion

The remote host is running ocPortal, a content management system written in PHP. There is a bug in the remote version of this software which may allow an attacker to execute arbitrary commands on the remote host by using a file inclusion bug in the file 'index.php'. An attacker may execute...

DSA-561-1 xfree86 - integer and stack overflows

Bulletin has no description...

Fedora Core 2 : cyrus-sasl-2.1.18-2.2 (2004-332)

At application startup, libsasl and libsasl2 attempt to build a list of all SASL plug-ins which are available on the system. To do so, the libraries search for and attempt to load every shared library found within the plug-in directory. This location can be set with the SASLPATH environment...

[Full-Disclosure] iDEFENSE Security Advisory 10.07.04: RealNetworks Helix Server Content-Length Denial of Service Vulnerability

RealNetworks Helix Server Content-Length Denial of Service Vulnerability iDEFENSE Security Advisory 10.07.04: www.idefense.com/application/poi/display?id=151&type=vulnerabilities October 7, 2004 I. BACKGROUND RealNetworks Helix Universal Server is a universal digital media delivery platform with...

DSA-556-1 netkit-telnet - invalid free(3)

Bulletin has no description...

Debian DSA-158-1 : gaim - arbitrary program execution

The developers of Gaim, an instant messenger client that combines several different networks, found a vulnerability in the hyperlink handling code. The 'Manual' browser command passes an untrusted string to the shell without escaping or reliable quoting, permitting an attacker to execute arbitrar...

TUTOS < 1.1.20040412 Multiple Input Validation Issues

The remote host is running Tutos, an open source team organization software package written in PHP. According to its banner, the remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack, path...

DSA-551-1 lukemftpd - incorrect internal variable handling

Bulletin has no description...

TUTOS < 1.2 Multiple Input Validation Vulnerabilities

The remote host is running Tutos, an open source team organization software package written in PHP. The remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack or a SQL injection against the...

SnipSnap: HTTP response splitting

Background SnipSnap is a user friendly content management system with features such as wiki and weblog. Description SnipSnap contains various HTTP response splitting vulnerabilities that could potentially compromise the sites data. Some of these attacks include web cache poisoning, cross-user...

Mozilla "send page" feature contains a buffer overflow vulnerability

Overview There is a buffer overflow vulnerability in the Mozilla "send page" feature that could allow a remote attacker to execute arbitrary code. Description Mozilla is an open-source web browser, email/newsgroup client, IRC client, and HTML editor available for a number of platforms including...

ZoneAlarm Pro Configuration File/Directory Permission Weakness DoS

This host is running a version of ZoneAlarm Pro that contains a flaw which may allow a local denial of service. To exploit this flaw, an attacker would need to tamper with the files located in %windir%/Internet Logs. An attacker may modify them and prevent ZoneAlarm from starting up properly. C...

OpenCA Multiple Signature Validation Bypass

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.3 contains multiple flaws that may allow revoked or expired certificates to be accepted as valid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

GLSA-200409-11 : star: Suid root vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-11 star: Suid root vulnerability A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact : Attackers with local user level access could potentially gain root level...