782 matches found
Authentication flaw
Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...
CVE-2009-4368
Centreon before 2.1.4 has multiple vulnerabilities in the ping, traceroute, and LDAP import components, likely related to improper authentication. Affects Centreon installations running versions prior to 2.1.4. Remediation: upgrade to Centreon 2.1.4 or apply the vendor patch (VendorFix). No explo...
CVE-2009-4368
Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the 1 ping tool, 2 traceroute tool, and 3 ldap import, possibly related to improper authentication...
Fedora 11 : php-pear-Net-Traceroute-0.21.2-1.fc11 (2009-11617)
Upstream changelog: QA Release: Prevent command injection kguest CVE-2009-4025 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 10 : php-pear-Net-Traceroute-0.21.2-1.fc10 (2009-12083)
Upstream changelog: QA Release: Prevent command injection kguest CVE-2009-4025 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 12 : php-pear-Net-Traceroute-0.21.2-1.fc12 (2009-11551)
Upstream changelog: QA Release: Prevent command injection kguest CVE-2009-4025 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Design/Logic Flaw
Argument injection vulnerability in the traceroute function in Traceroute.php in the NetTraceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4025
Argument injection vulnerability in the traceroute function in Traceroute.php in the NetTraceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information...
PEAR Net_Traceroute: Command injection
Background PEAR NetTraceroute is an OS independent wrapper class for executing traceroute calls from PHP. Description Pasquale Imperato reported that the $host parameter to the traceroute function in Traceroute.php is not properly sanitized before being passed to exec. Impact A remote attacker...
[SECURITY] Fedora 12 Update: php-pear-Net-Traceroute-0.21.2-1.fc12
OS independent wrapper class for executing traceroute calls...
[SECURITY] Fedora 10 Update: php-pear-Net-Traceroute-0.21.2-1.fc10
OS independent wrapper class for executing traceroute calls...
[SECURITY] Fedora 11 Update: php-pear-Net-Traceroute-0.21.2-1.fc11
OS independent wrapper class for executing traceroute calls...
Nagios3 statuswml.cgi Command Injection
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Nagios3 statuswml.cgi Command Injection
Exploit for unknown platform in category web applications ======================================= Nagios3 statuswml.cgi Command Injection ======================================= $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions...
Nagios3 - 'statuswml.cgi' Command Injection (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Nagios3...
Nagios3 - statuswml.cgi Command Injection (Metasploit)
Nagios3 - statuswml.cgi Command Injection Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
CVE-2009-3486
Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...
Mandrake Security Advisory MDVSA-2009:187 (nagios)
The remote host is missing an update to nagios announced via advisory MDVSA-2009:187. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
