5356 matches found
security flaw
snmpapi.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service crash by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different...
CVE-2005-2845
Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information...
CVE-2005-2845
Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information...
CVE-2004-2421
Unknown vulnerability in Hitachi Job Management Partner JP1 JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mode, allows attackers to bypass authentication and gain administrator rights...
CVE-2004-2420
Hitachi JP1/File Transmission Server/FTP 6 and 7 (JP1) is affected. A remote attacker can trigger a denial of service (daemon halt) by sending a port scan that includes reset packets. The CVE entry describes the exposure but does not provide exploit code or in-the-wild details in the connected do...
CVE-2004-2421
CVE-2004-2421 affects Hitachi JP1/File Transmission Server/FTP 6 and 7 running on HP-UX in trusted mode. The description states an authentication bypass that could grant administrator rights, but the provided documents do not include concrete technical details, affected versions beyond JP1/FTP 6 ...
WebEOC handles sensitive information in an insecure manner
Overview WebEOC handles sensitive information in an insecure manor. As a result, sensitive information may be exposed to untrusted parties. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate, and disseminate information betwee...
FreeBSD : leafnode -- fetchnews denial-of-service triggered by transmission abort/timeout (66dbb2ee-99b8-45b2-bb3e-640caea67a60)
When an upstream server aborts the transmission or stops sending data after the fetchnews program has requested an article header or body, fetchnews may crash, without querying further servers that are configured. This can prevent articles from being fetched. %NASLMINLEVEL 70300 C Tenable Network...
TCP does not adequately validate segments before updating timestamp value
Overview Certain TCP implementations may allow a remote attacker to arbitrarily modify host timestamp values, leading to a denial-of-service condition. Description The Transmission Control Protocol TCP is defined in RFC 793 as a means to provide reliable host-to-host transmission between hosts in...
CVE-2004-1852
DameWare Mini Remote Control is affected. Versions 3.x prior to 3.74 and 4.x prior to 4.2 transmit the Blowfish encryption key in plaintext, allowing remote attackers to retrieve sensitive information. Affected: 3.x up to 3.73 and 4.x up to 4.1. Root cause: encryption key exposed in transit. Impa...
leafnode -- fetchnews denial-of-service triggered by transmission abort/timeout
When an upstream server aborts the transmission or stops sending data after the fetchnews program has requested an article header or body, fetchnews may crash, without querying further servers that are configured. This can prevent articles from being fetched...
CVE-2001-1463
The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...
FreeBSD-SA-05:02.sendfile
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: syskern Announced: 2005-04-04 Credits: Sven...
CVE-2004-0871
Mozilla does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...
CVE-2004-0872
CVE-2004-0872 affects Opera and describes a cookie handling flaw where cookies sent over an insecure channel (HTTP) can also be presented on a secure channel (HTTPS/SSL) within the same domain. This enables potential cookie leakage and unauthorized session usage (Cross Security Boundary Cookie In...
CVE-2004-2421
Unknown vulnerability in Hitachi Job Management Partner JP1 JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mode, allows attackers to bypass authentication and gain administrator rights...
CVE-2004-2578
phpGroupWare before 0.9.16.002 transmits the 1 header admin and 2 setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords...
security flaw
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...
DEBIAN-CVE-2004-0230
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...
