KLA10270 OSI vulnerability in NetOp

An unspecified vulnerability was found in NetOp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products NetOp CVE list CVE-2004-0950 warning Solution...

[SA14063] SnugServer FTP Server Directory Traversal Vulnerability

TITLE: SnugServer FTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA14063 VERIFY ADVISORY: http://secunia.com/advisories/14063/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: SnugServer 3.x http://secunia.com/product/4576/...

[SA14016] CoolForum Two Vulnerabilities

TITLE: CoolForum Two Vulnerabilities SECUNIA ADVISORY ID: SA14016 VERIFY ADVISORY: http://secunia.com/advisories/14016/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: CoolForum v0.x http://secunia.com/product/401/ DESCRIPTION: benjilenoob h...

[SA13976] BRIBBLE webadmin Authentication Bypass Vulnerability

TITLE: BRIBBLE webadmin Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13976 VERIFY ADVISORY: http://secunia.com/advisories/13976/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BRIBBLE 1.x http://secunia.com/product/4562/ DESCRIPTION: A vulnerabili...

[SA13993] ginp Java Preferences API Security Bypass

TITLE: ginp Java Preferences API Security Bypass SECUNIA ADVISORY ID: SA13993 VERIFY ADVISORY: http://secunia.com/advisories/13993/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: ginp 0.x http://secunia.com/product/4566/ DESCRIPTION: A security issue has been reporte...

KLA10419 WLF vulnerability in getmail

Unspecified vulnerabilities were found in getmail. By exploiting these vulnerabilities malicious users can overwrite arbitrary files in arbitrary directories. These vulnerabilities can be exploited locally via a symlink attack. Original advisories - Related products getmail CVE list CVE-2004-0881...

[SA13960] GraphicsMagick PSD Image Decoding Buffer Overflow

TITLE: GraphicsMagick PSD Image Decoding Buffer Overflow SECUNIA ADVISORY ID: SA13960 VERIFY ADVISORY: http://secunia.com/advisories/13960/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: GraphicsMagick 1.x http://secunia.com/product/3764/ DESCRIPTION: A vulnerability...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2005:009)

A vulnerability in mpg123's ability to parse frame headers in input streams could allow a malicious file to exploit a buffer overflow and execute arbitrary code with the permissions of the user running mpg123. The updated packages have been patched to prevent these problems. %NASLMINLEVEL 70300 C...

phpGroupWare index.php Calendar Date XSS

The version of PhpGroupWare on the remote host is reportedly affected by HTML injection vulnerabilities that present themselves due to a lack of sufficient input validation performed on form fields used by PhpGroupWare modules. A malicious attacker may exploit these issues to inject arbitrary HTM...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2004:163)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like kdegraphics, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated...

KLA10302 DoS vulnerability in Eudora

A buffer overflow was found in Eudora. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Release note Related products Qualcom-Eudora CVE list CVE-2004-2301 warnin...

KLA10053 DoS vulnerability in ActivePerl

An integer overflow vulnerability was found in ActivePerl. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited at a point related to the duplication operator via a large multiplier. Original advisories...

PHP shmop.c module permits write of arbitrary memory.

Hi list-eners, ========================================================== Title: Php shmop write of arbitrary memory - Safe Mode Bypass Affected: Php = 5.0.2 & 4.3.9 if shmop module is loaded. Vulnerability Type: Input Validation - write of arbitrary memory ==Summary Shared Memory PHP Module has ...

phpBB viewtopic.php fails to properly sanitize input passed to the "highlight" parameter

Overview phpBB contains an user input validation problem with regard to the parsing of the URL. An intruder can deface a phpBB website, execute arbitrary commands, or gain administrative privileges on a compromised bulletin board. Description phpBB is an open-source bulletin board. A lack of inpu...

[SA13468] Ethereal Multiple Vulnerabilities

TITLE: Ethereal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13468 VERIFY ADVISORY: http://secunia.com/advisories/13468/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Ethereal 0.x http://secunia.com/product/1228/ DESCRIPTION: Multiple vulnerabilities have be...

Mandrake Linux Security Advisory : iproute2 (MDKSA-2004:148)

Herbert Xu discovered that iproute can accept spoofed messages sent via the kernel netlink interface by other users on the local machine. This could lead to a local Denial of Service attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...

PunBB IMG Tag Client Side Scripting XSS

The remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate the IMG tag. With a specially crafted URL, an attacker can cause arbitrary code execution within a user's browser, resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable...

PunBB profile.php XSS

According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php'. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser, resulting in a loss of integrity, theft of...

PunBB Search Dropdown Private Forum Disclosure

According to its banner, the remote version of PunBB reportedly may include protected forums in a search dropdown list regardless of whether a user has permissions to view those forums. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 116774-04

SunOS 5.9: ping patch. Date this patch was last updated by Sun : Feb/05/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1575...