PT-2009-3690 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper validation of user-mode input associated with editing a specific desktop parameter, allowing local users to gain privileges via a crafted...

PT-2007-6732 · Riverbed +1 · Npf.Sys +2

Name of the Vulnerable Software and Affected Versions: WinPcap versions prior to 4.0.2 Description: The issue is related to multiple array index errors in the bpf filter init function in NPF.SYS, which occurs when WinPcap is run in monitor mode. This can be exploited by local users via crafted...

PT-2007-3929 · Openld · Openld

Name of the Vulnerable Software and Affected Versions: OpenLD versions prior to 1.1.9 OpenLD 1.1-modified versions prior to 1.1-modified3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature,...

PT-2006-3170 · Gnu · Mailman

Name of the Vulnerable Software and Affected Versions: Mailman versions prior to 2.1.9 Description: A format string issue allows attackers to execute arbitrary code. The vendor has disputed this issue, stating it is unexploitable. Recommendations: For versions prior to 2.1.9, update to version...

PT-2005-5410 · Webhost Automation · Helm

Name of the Vulnerable Software and Affected Versions: WebHost Automation Ltd Helm versions prior to 3.2.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The estimated number of potentially affected devices worldwide is not available...

[CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service

Secure Computer Group - University of A Coruna http://research.tic.udc.es/scg/ -- x -- dotpi.com Information Technologies Research Labs http://www.dotpi.com ID: 20050429-2 Document title: Administration protocol abuse leads to Service and System Denial of Service Document revision: 1.0 Coordinate...

Microsoft Security Bulletin MS05-019 Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066)

Microsoft Security Bulletin MS05-019 Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service 893066 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

PT-2005-1868 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.11 Description: The issue allows local users to gain privileges by injecting mouse or keyboard events into other user sessions due to a lack of access restriction to the N MOUSE line discipline for a TTY...

Squid fails to properly handle oversized reply headers

Overview The Squid web proxy cache may be vulnerable to oversized HTTP reply headers. Description Squid functions as a web proxy and cache application for a number of protocols, including the hypertext transfer protocol HTTP. A defect in the Squid HTTP handling prevents oversized reply headers...

[SA14051] phpPgAds "dest" Parameter HTTP Response Splitting Vulnerability

TITLE: phpPgAds "dest" Parameter HTTP Response Splitting Vulnerability SECUNIA ADVISORY ID: SA14051 VERIFY ADVISORY: http://secunia.com/advisories/14051/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpPgAds 2.x http://secunia.com/product/4577/ DESCRIPTION: Te...

Alert: Microsoft Security Bulletin MS05-001 - Vulnerability in HTML Help Could Allow Code Execution (890175)

Microsoft Security Bulletin MS05-001 Vulnerability in HTML Help Could Allow Code Execution 890175 Issued: January 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

PT-2004-2343 · Argosoft · Argosoft Ftp

Name of the Vulnerable Software and Affected Versions: ArGoSoft FTP versions prior to 1.4.2.1 Description: The issue allows remote attackers to determine valid usernames by generating an error message if the user name does not exist instead of prompting for a password. Recommendations: For versio...

GLSA-200412-19 : phpMyAdmin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-19 phpMyAdmin: Multiple vulnerabilities Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to command execution or fil...

Microsoft Security Bulletin MS04-041 Vulnerability in WordPad Could Allow Code Execution (885836)

Microsoft Security Bulletin MS04-041 Vulnerability in WordPad Could Allow Code Execution 885836 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...

[SA13287] SugarCRM Unspecified Security Issues

TITLE: SugarCRM Unspecified Security Issues SECUNIA ADVISORY ID: SA13287 VERIFY ADVISORY: http://secunia.com/advisories/13287/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SugarCRM 1.x http://secunia.com/product/3845/ SugarCRM 2.x http://secunia.com/product/4314/...

RHEL 3 : mysql-server (RHSA-2004:611)

An updated mysql-server package that fixes various security issues is now available in the Red Hat Enterprise Linux 3 Extras channel of Red Hat Network. MySQL is a multi-user, multi-threaded SQL database server. A number of security issues that affect the mysql-server package have been reported...

Microsoft Security Bulletin MS04-037 Vulnerability in Windows Shell Could Allow Remote Code Execution (841356)

Microsoft Security Bulletin MS04-037 Vulnerability in Windows Shell Could Allow Remote Code Execution 841356 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Security Bulletin MS04-030 Vulnerability in WebDAV XML Message Handler Could Lead to a Denial of Service (824151)

Microsoft Security Bulletin MS04-030 Vulnerability in WebDAV XML Message Handler Could Lead to a Denial of Service 824151 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Denial of Service Maximum Severity...

Debian DSA-487-1 : neon - format string

Multiple format string vulnerabilities were discovered in neon, an HTTP and WebDAV client library. These vulnerabilities could potentially be exploited by a malicious WebDAV server to execute arbitrary code with the privileges of the process using libneon. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-132-1 : apache-ssl - remote DoS / exploit

Mark Litchfield found a denial of service attack in the Apache web-server. While investigating the problem the Apache Software Foundation discovered that the code for handling invalid requests which use chunked encoding also might allow arbitrary code execution on 64 bit architectures...