CVE-2004-1756

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers...

Install source spoofing with user:pass@host — Mozilla

The installation confirmation dialog shows the source of the software. By adding a long, fake "user:pass" in front of the true hostname the user might be convinced to trust software that comes from an untrustworthy source. This is similar to attempts used in some phishing mail:...

Hydra: telnet

This plugin runs Hydra to find telnet passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Hydra: NNTP

This plugin runs Hydra to find NNTP accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Hydra: MS SQL

This plugin runs Hydra to find MS SQL passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Hydra: POP3

This plugin runs Hydra to find POP3 accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Hydra: Cisco enable

This plugin runs Hydra to find Cisco 'enable' passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Debian DSA-061-1 : gnupg - printf format attack

The version of GnuPG GNU Privacy Guard, an OpenPGP implementation as distributed in Debian GNU/Linux 2.2 suffers from two problems : - fish stiqz reported on bugtraq that there was a printf format problem in the doget function: it printed a prompt which included the filename that was being...

Debian DSA-476-1 : heimdal - cross-realm

According to a security advisory from the heimdal project, heimdal, a suite of software implementing the Kerberos protocol, has 'a cross-realm vulnerability allowing someone with control over a realm to impersonate anyone in the cross-realm trust path.' %NASLMINLEVEL 70300 C Tenable Network...

Comersus Cart 5.0 - HTTP Response Splitting

Comersus Cart 5.0 - HTTP Response Splitting source: https://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or...

GLSA-200404-09 : Cross-realm trust vulnerability in Heimdal

The remote host is affected by the vulnerability described in GLSA-200404-09 Cross-realm trust vulnerability in Heimdal Heimdal does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the...

SeaMonkey < 1.1.10 Multiple Vulnerabilities

Binary data 4568.prm...

Nikto (NASL wrapper)

This plugin runs Nikto2, an open source GPL web server scanner used to perform comprehensive tests for multiple issues, such as outdated server versions, potentially dangerous files or programs, version specific problems, various configuration items, etc. See the section 'plugins options' to...

Mandrake Linux Security Advisory : gnupg (MDKSA-2003:061)

A bug was discovered in GnuPG versions 1.2.1 and earlier. When gpg evaluates trust values for different UIDs assigned to a key, it would incorrectly associate the trust value of the UID with the highest trust value with every other UID assigned to that key. This prevents a warning message from...

osTicket Detection

osTicket was detected on the remote host. TRUSTED...

MSIE Overly Trusted Location Variant Method Cache Vulnerability

This vulnerability as well as many more can be found at http://www.greyhats.cjb.net Overly Trusted Location Variant Method Cache Vulnerability Tested IEXPLORE.EXE file version 6.0.2800.1106 MSHTML.DLL file version 6.00.2800.1400 Microsoft Windows XP sp1 Discussion Apparently, Internet Explorer...

RHEL 2.1 : gnupg (RHSA-2003:176)

Updated gnupg packages are now available which correct a bug in the GnuPG key validation functions. The GNU Privacy Guard GnuPG is a utility for encrypting data and creating digital signatures. When evaluating trust values for the UIDs assigned to a given key, GnuPG versions earlier than 1.2.2...

FreeBSD : Incorrect cross-realm trust handling in Heimdal (65)

The following package needs to be updated: heimdal %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgbfb3694184fa11d8a41f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2004-0233

Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...

FreeBSD-SA-04:08.heimdal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:08.heimdal Security Advisory The FreeBSD Project Topic: heimdal cross-realm trust vulnerability Category: core Module: cryptoheimdal Announced: 2004-05-05...