[SA13468] Ethereal Multiple Vulnerabilities

TITLE: Ethereal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13468 VERIFY ADVISORY: http://secunia.com/advisories/13468/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Ethereal 0.x http://secunia.com/product/1228/ DESCRIPTION: Multiple vulnerabilities have be...

PHPKIT SQL Injection, XSS

Author: Steve Date: November 22, 2004 Affected Software:PHP KIT Software Version: 1.6.03 - 1.6.1 Software URL: http://www.phpkit.de Attack: SQL Injection, allowing people to manipulate the query into pulling data. XSS What is PHPKIT: PHPKIT is a modular developed Homepage Software which can simpl...

Debian DSA-202-1 : im - insecure temporary files

Tatsuya Kinoshita discovered that IM, which contains interface commands and Perl libraries for E-mail and NetNews, creates temporary files insecurely. - The impwagent program creates a temporary directory in an insecure manner in /tmp using predictable directory names without checking the return...

Debian DSA-281-1 : moxftp - buffer overflow

Knud Erik Hojgaard discovered a vulnerability in moxftp and xftp respectively, an Athena X interface to FTP. Insufficient bounds checking could lead to execution of arbitrary code, provided by a malicious FTP server. Erik Tews fixed this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[VulnWatch] OpenBSD radius authentication vulnerability

Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...

Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577 HTTP Check)

The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. %NASLMINLEVEL 70300 This script was written by Michael J. Richardson...

[SA12374] ignitionServer "SERVER" Denial of Service Vulnerability

TITLE: ignitionServer "SERVER" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12374 VERIFY ADVISORY: http://secunia.com/advisories/12374/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: ignitionServer 0.3.x http://secunia.com/product/3565/ ignitionServer 0.2.x...

Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities

Binary data 1996.prm...

wdExec.txt

Williams Database Page Parser File: page.pl Version: 1.0 Author: Neil Thompson Web: www.williamsdb.com Exploit: www.host.com/page.pl?page=|id| ThankS All : Infektion Group...

12Planet Chat Server 2.9 - Cross-Site Scripting

12Planet Chat Server 2.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10659/info It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data. The problem presents itself when...

Linksys Web Camera Software 2.10 - 'Next_file' File Disclosure

source: https://www.securityfocus.com/bid/10476/info It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files. Linksys Web Camera software version 2.10 is reportedly prone to this issue, however...

NetChat HTTP Server Stack Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetChat HTTP Server Stack Overflow RELEASE DATE: May 16, 2004 DATE REPORTED: May 12, 2004 RISK: Medium IMPACT: Attackers may be able to execute arbitrary code with the privileges of the user running the applicaton. VERSIONS: = 7.3 OVERVIEW: NetChat is...

Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection

Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issue...

Clients broadcast buffer overflow in Red Faction &lt;= 1.20

Luigi Auriemma Application: Red Faction http://www.redfaction.com Versions: = 1.20 Platforms: Windows, MacOS Bug: broadcast client buffer overflow Risk: highly critical Exploitation: remote and automatic, versus clients Date: 01 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Invision Power Board (IP.Board) < 1.3 - SQL Injection

IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage of...

Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...

LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service

LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote...

Windows FTP Server Format String Vulnerability

Windows FTP Server Format String Vulnerability Credit: Author : Peter Winter-Smith Software: Packages : Windows FTP Server Version : 1.6 and below Vendor : HD Soft/Windows Ftp Server SOFTWARE Vendor Url : http://srv.nease.net/ Vulnerability: Bug Type : 'wscanf' Format String Vulnerability Severit...

BES-CMS 0.40.5 - membersindex.inc.php File Inclusion

BES-CMS 0.40.5 - membersindex.inc.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a...

BES-CMS 0.40.5 - folder.php File Inclusion

BES-CMS 0.40.5 - folder.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable...