TYPO3 SQL Injection vunerabilitie

Hello Bugtraq : Two week ago I found a SQL Inejetion vulnerabilitie in Typo3 in the links-section/module/whatever you call it. I didn't really try to develope an exploit because I thought typo3 would directly react. But unfortunately that didn't happen :/ So here is the url that "exploits" the...

HP-UX Security patch : PHSS_22406

The remote host is missing HP-UX Security Patch number PHSS22406 . Sec. Vulnerability OpenView NNM ovalarmsrv %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16838;...

Fedora Core 2 : xpdf-3.00-3.8 (2005-135)

Wed Feb 09 2005 Than Ngo 1:3.00-3.8 - More fixing of CVE-2004-0888 patch bug 135393, 147524 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

[SA13302] BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability

TITLE: BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13302 VERIFY ADVISORY: http://secunia.com/advisories/13302/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BNC IRC proxy 2.x http://secunia.com/product/1622/...

Solaris 7 (x86) : 108415-07

SunOS 5.7x86: /usr/bin/cpio patch. Date this patch was last updated by Sun : Oct/04/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

HTTP Response Splitting Vulnerability in Wordpress 1.2

SECURITY ADVISORY: HTTP Response Splitting in WordPress 1.2 AUTHOR: Chaotic Evil chaoticevil $$$at$$$ spyring $$$dot$$$ com DATE: October 6th, 2004 PRODUCT: WordPress 1.2 wordpress.org FROM THE VENDOR WEBSITE: WordPress is a state-of-the-art semantic personal publishing platform with a focus on...

[SA12692] MediaWiki "raw" Page Output Mode Cross-Site Scripting Vulnerability

TITLE: MediaWiki "raw" Page Output Mode Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA12692 VERIFY ADVISORY: http://secunia.com/advisories/12692/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MediaWiki 1.x http://secunia.com/product/2546/ DESCRIPTIO...

Debian DSA-500-1 : flim - insecure temporary file

Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library for working with internet messages, where temporary files were created without taking appropriate precautions. This vulnerability could potentially be exploited by a local user to overwrite files with the privileges of the use...

Debian DSA-490-1 : zope - arbitrary code execution

A vulnerability has been discovered in the index support of the ZCatalog plug-in in Zope, an open source web application server. A flaw in the security settings of ZCatalog allows anonymous users to call arbitrary methods of catalog indexes. The vulnerability also allows untrusted code to do the...

Debian DSA-052-1 : sendfile - broken dropping of privileges

Daniel Kobras has discovered and fixed a problem in sendfiled which caused the daemon not to drop privileges as expected when sending notification mails. Exploiting this, a local user can easily make it execute arbitrary code under root privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

Debian DSA-057-1 : gftp - printf format attack

The gftp package as distributed with Debian GNU/Linux 2.2 has a problem in its logging code: it logged data received from the network but it did not protect itself from printf format attacks. An attacker can use this by making an FTP server return special responses that exploit this. %NASLMINLEVE...

Debian DSA-162-1 : ethereal - buffer overflow

Ethereal developers discovered a buffer overflow in the ISIS protocol dissector. It may be possible to make Ethereal crash or hang by injecting a purposefully malformed packet onto the wire, or by convincing someone to read a malformed packet trace file. It may be possible to make Ethereal run...

[SA12404] PvPGN Buffer Overflow Vulnerability

TITLE: PvPGN Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12404 VERIFY ADVISORY: http://secunia.com/advisories/12404/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PvPGN 1.x http://secunia.com/product/3825/ DESCRIPTION: A vulnerability has been reported in...

Mandrake Linux Security Advisory : eog (MDKSA-2003:048)

A vulnerability was discovered in the Eye of GNOME EOG program, version 2.2.0 and earlier, that is used for displaying graphics. A carefully crafted filename passed to eog could lead to the execution of arbitrary code as the user executing eog. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : uucp (MDKSA-2001:078)

Zen Parse discovered that an argument handling problem that exists in the uucp package can allow a local attacker to gain access to the uucp user or group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linu...

Denial of Service vulnerability in several Lexmark HTTP servers

Denial of Service vulnerability in several Lexmark HTTP servers. Several Lexmark network printers is shipped with a build-in HTTP server for administrative tasks. The webserver software is vulnerable to a Denial of Service attack that will force the webserver to restart and/or stop taking request...

Solaris 2.5.1 (sparc) : 106905-01

SunOS 5.5.1: apropos/catman/man/whatis patch. Date this patch was last updated by Sun : Jan/04/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (x86) : 108498-01

SunOS 5.5.1x86: ASET sets gid on /tmp,/var/tmp when med/high secu. Date this patch was last updated by Sun : Jan/24/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 2.5.1 (sparc) : 104637-04

SunOS 5.5.1: /usr/ccs/lib/libcurses.a patch. Date this patch was last updated by Sun : Mar/09/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 110916-07

SunOS 5.8: sort patch. Date this patch was last updated by Sun : May/16/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1335...