SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-013 Advisory Title: Multiple Vulnerabilities in Mandiant First Response Author: Brian Reilly / [email protected] Release Date: 18-12-2006...

IBM Access Support eGatherer ActiveX control buffer overflow

Overview The IBM Access Support eGatherer ActiveX control contains a buffer overflow vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The IBM Access Support eGatherer ActiveX control has the ability to collect system...

CVE-2006-4627

CVE-2006-4627 affects the System Information ActiveX control (msinfo.dll) when accessed via Internet Explorer. The issue allows a remote attacker to cause a denial of service (crash) by calling SaveFile with an excessively long computer and possibly long filename and category arguments. The avail...

Dish dish intrusion issues face-to-face-the vulnerability warning-the black bar safety net

Dish dish intrusion issues face-to-face I was too lazy to go to school when you've never done the job to only one of the advantages of the love want to the problem in order to IT168, the development had to move to even have stainless candle of stupid hands. From that about itI found a lot of peop...

Default configuration

The web server for D-Link Wireless Access-Point DWL-2100ap firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords...

[SA19654] Boardsolution "keyword" Cross-Site Scripting Vulnerability

TITLE: Boardsolution "keyword" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19654 VERIFY ADVISORY: http://secunia.com/advisories/19654/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Boardsolution 1.x...

[SA19662] Web+Shop "storeid" Full Path Disclosure Weakness

TITLE: Web+Shop "storeid" Full Path Disclosure Weakness SECUNIA ADVISORY ID: SA19662 VERIFY ADVISORY: http://secunia.com/advisories/19662/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Web+Shop 5.x http://secunia.com/product/9262/ DESCRIPTION: Revnic...

ArGoSoft Mail Server _DUMP Command System Information Disclosure

The remote host is running ArGoSoft Mail Server, a messaging system for Windows. An unauthenticated attacker can gain information about the installed application as well as the remote host itself by sending the 'DUMP' command to the POP3 server. C Tenable Network Security, Inc. include"compat.inc...

Information disclosure

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information...

CVE-2006-0767

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information...

[SA18776] V-webmail Cross-Site Scripting and Path Disclosure

TITLE: V-webmail Cross-Site Scripting and Path Disclosure SECUNIA ADVISORY ID: SA18776 VERIFY ADVISORY: http://secunia.com/advisories/18776/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: V-webmail 1.x...

[SA18480] E-Post Mail Server Products Multiple Vulnerabilities

TITLE: E-Post Mail Server Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18480 VERIFY ADVISORY: http://secunia.com/advisories/18480/ CRITICAL: Highly critical IMPACT: Security Bypass, Exposure of system information, DoS, System access WHERE: From remote SOFTWARE: E-Post Mail Server 4.x...

[SA17664] PHP-Fusion SQL Injection Vulnerabilities

TITLE: PHP-Fusion SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17664 VERIFY ADVISORY: http://secunia.com/advisories/17664/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: PHP-Fusion 6.x http://secunia.com/product/5291...

Novell Groupwise WebAcc Information Disclosure

Novell Groupwise WebAcc Servlet is installed. This servlet exposes critical system information, and allows remote attackers to read any file. SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Novell Netbasic Scripting Server Directory Traversal

Novell Netbasic Scripting Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Power Up Information Disclosure

The remote server is using the Power Up CGI. This CGI exposes critical system information, and allows remote attackers to read any world readable file. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced...

Default Novonyx Web Server Files

Novell Netware default Novonyx web server files. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...

Default Novonyx Web Server Files

Novell Netware default Novonyx web server files. A default installation of Novell 5.x will install the Novonyx web server. Numerous web server files included with this installation could reveal system information. OpenVAS Vulnerability Test $Id: novellnovonyxdefaultfiles.nasl 8023 2017-12-07...

Amanda client version

This detects the Amanda backup system client version. The client version gives potential attackers additional information about the system they are attacking. SPDX-FileCopyrightText: 2005 Paul J. Ewing Jr. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...