894 matches found
krb5 -- multiple checksum handling vulnerabilities
The MIT Kerberos team reports: MIT krb incorrectly accepts an unkeyed checksum with DES session keys for version 2 RFC 4121 of the GSS-API krb5 mechanism. An unauthenticated remote attacker can forge GSS tokens that are intended to be integrity-protected but unencrypted, if the targeted...
Super Simple Blog Script entry Parameter SQL Injection
The remote Super Simple Blog Script install hosted on the remote web server is affected by a SQL injection vulnerability because its 'comments.php' script does not properly sanitize input to the 'entry' parameter before using it a database query. Regardless of PHP's 'magicquotesgpc' setting, an...
MySQL Community Server < 5.1.47 / 5.0.91 Multiple Vulnerabilities
Binary data 801133.prm...
Ubuntu Update for krb5 vulnerabilities USN-916-1
Ubuntu Update for Linux kernel vulnerabilities USN-916-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9161.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for krb5 vulnerabilities USN-916-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
CA Products Discovery Service Buffer Overflow (CVE-2006-5143)
Computer Associates' CA BrightStor ARCserve Backup and Business Protection Suite families of software offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distribution operations including Backup/Restore, Data...
CA iTechnology iGateway Service Content-Length Buffer (CVE-2005-3653)
Numerous Computer Associates CA products incorporate shared components that perform common tasks not specific to any one product. One such component is the CA iGateway service. The iGateway service is an XML-based interface that integrates with storage management applications and facilitates...
GLSA-200707-01 : Firebird: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200707-01 Firebird: Buffer overflow Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing 'connect' requests with an overly large 'pcnctcount' value. Impact : An unauthenticated remote attacker coul...
Firebird: Buffer overflow
Background Firebird is an open source relational database that runs on Linux, Windows, and various UNIX systems. Description Cody Pierce from TippingPoint DVLabs has discovered a buffer overflow when processing "connect" requests with an overly large "pcnctcount" value. Impact An unauthenticated...
JVN#86092776: BASP21 vulnerable in handling CRLF sequences
Impact An unauthenticated remote attacker may send an unintended email from a web application which its email function is implemented using BASP21. Solution Products Affected bsmtp.dll included in BASP21 2003.0211 Versions of BASP21 Pro earlier than 1,0,702,27...
VERITAS Backup Exec remote registry access validation vulnerability
Overview VERITAS Backup Exec contains a remote registry access validation vulnerability. Description VERITAS Backup Exec is a data backup and recovery solution with support for over the network backup.An access validation vulnerability in Backup Exec for Windows allows remote attackers to access...
krb5 -- ASN.1 decoder denial-of-service vulnerability
An advisory published by the MIT Kerberos team says: The ASN.1 decoder library in the MIT Kerberos 5 distribution is vulnerable to a denial-of-service attack causing an infinite loop in the decoder. The KDC is vulnerable to this attack. An unauthenticated remote attacker can cause a KDC or...
Sun Java Runtime Environment vulnerable to DoS
Overview The Sun Java Runtime Environment JRE contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service condition in the Java Virtual Machine JVM. Description The Sun Java Runtime Environment provides the libraries and components necessary to run...
Thunderstone Software TEXIS Nonexistent File Request Path Disclosure
The Thunderstone Software TEXIS application running on the remote host is affected by an information disclosure vulnerability that allows an unauthenticated, remote attacker to obtain the full path of the web root directory by making a specially crafted request for a nonexistent file. %NASLMINLEV...
Oracle9i Application Server Apache PL/SQL module does not properly handle HTTP Authorization header
Overview A vulnerability exists in the way the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS handles HTTP Authorization headers. This vulnerability could allow an unauthenticated remote attacker to crash the Apache service. Description...
Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons
BindView Security Advisory -------- Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons Issue Date: July 30, 2001 Contact: [email protected] Topic: Many Microsoft DCE/RPC servers are vulnerable to remote DoS attacks Overview: Many DCE/RPC servers don't do proper parameter...
TFS SMTP 3.2 MAIL FROM overflow
The remote SMTP server may be affected by a buffer overflow triggered when it receives an overly long argument to the 'MAIL FROM' command. This vulnerability is reported to affect TenFour TFS SMTP and may allow an unauthenticated remote attacker to crash the service or even execute arbitrary code...
Security Update for Windows Server 2003 x64 Edition (KB978542)
A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...
Security Update for Windows XP (KB978706)
A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...
Security Update for Windows 2000 (KB975560)
A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...
Security Update for Windows Server 2008 for Itanium-based Systems (KB978601)
A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...