Directory traversal

Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. dot dot in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/...

Ubuntu Update for evolution vulnerability USN-583-1

Ubuntu Update for Linux kernel vulnerabilities USN-583-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for evolution vulnerability USN-583-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-638-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for kdelibs, qt-x11-free vulnerability USN-452-1

Ubuntu Update for Linux kernel vulnerabilities USN-452-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4521.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for kdelibs, qt-x11-free vulnerability USN-452-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for vinagre vulnerability USN-689-1

Ubuntu Update for Linux kernel vulnerabilities USN-689-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for vinagre vulnerability USN-689-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for pcre3 vulnerability USN-581-1

Ubuntu Update for Linux kernel vulnerabilities USN-581-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5811.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pcre3 vulnerability USN-581-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-438-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for inkscape vulnerability USN-438-1

Ubuntu Update for Linux kernel vulnerabilities USN-438-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4381.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for inkscape vulnerability USN-438-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for qt-x11-free vulnerability USN-513-1

Ubuntu Update for Linux kernel vulnerabilities USN-513-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5131.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for qt-x11-free vulnerability USN-513-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Security Best Practice: Protect Yourself from MS-RPC and DCE-RPC Vulnerabilities

DCE/RPC stands for "Distributed Computing Environment / Remote Procedure Calls". It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having...

CentOS Update for ruby CESA-2008:0562-01 centos2 i386

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2008:0562-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Buffer overflow

Buffer overflow in SUSE blinux aka sbl in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming data and authentication-strings."...

CVE-2009-0310: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in SUSE blinux aka sbl in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming data and authentication-strings."...

Fedora Update for libHX FEDORA-2008-7976

Check for the Version of libHX OpenVAS Vulnerability Test Fedora Update for libHX FEDORA-2008-7976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

VMware Products vmware-authd Denial of Service Vulnerability (Windows)

The host is installed with VMWare products that are vulnerable to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsdosvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Products vmware-authd Denial of Service Vulnerability Windows Authors: Chandan S Copyright:...

snmp-brute NSE Script

Attempts to find an SNMP community string by brute force guessing. This script opens a sending socket and a sniffing pcap socket in parallel threads. The sending socket sends the SNMP probes with the community strings, while the pcap socket sniffs the network for an answer to the probes. If valid...

USN-689-1: Vinagre vulnerability

Alfredo Ortega discovered a flaw in Vinagre's use of format strings. A remote attacker could exploit this vulnerability if they tricked a user into connecting to a malicious VNC server, or opening a specially crafted URI with Vinagre. In Ubuntu 8.04, it was possible to execute arbitrary code with...

openSUSE 10 Security Update : mysql (mysql-5613)

Empty bit-strings in a query could crash the MySQL server CVE-2008-3963. Due to another flaw users could access tables of other users CVE-2008-4097, CVE-2008-4098. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

php -- ini database truncation inside dba_replace() function

securityfocus research reports: A bug that leads to the emptying of the INI file contents if the database key was not found exists in PHP dba extension in versions 5.2.6, 4.4.9 and earlier. Function dbareplace are not filtering strings key and value. There is a possibility for the destruction of...