Debian DSA-166-1 : purity - buffer overflows

Two buffer overflows have been discovered in purity, a game for nerds and hackers, which is installed setgid games on a Debian system. This problem could be exploited to gain unauthorized access to the group games. A malicious user could alter the highscore of several games. %NASLMINLEVEL 70300 C...

Debian DSA-408-1 : screen - integer overflow

Timo Sirainen reported a vulnerability in screen, a terminal multiplexor with VT100/ANSI terminal emulation, that can lead an attacker to gain group utmp privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian DSA-186-1 : log2mail - buffer overflow

Enrico Zini discovered a buffer overflow in log2mail, a daemon for watching logfiles and sending lines with matching patterns via mail. The log2mail daemon is started upon system boot and runs as root. A specially crafted remote log message could overflow a static buffer, potentially leaving...

Debian DSA-435-1 : mpg123 - heap overflow

A vulnerability was discovered in mpg123, a command-line mp3 player, whereby a response from a remote HTTP server could overflow a buffer allocated on the heap, potentially permitting execution of arbitrary code with the privileges of the user invoking mpg123. In order for this vulnerability to b...

Debian DSA-341-1 : liece - insecure temporary file

liece, an IRC client for Emacs, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and liece, potentially with contents supplied by the attacker...

TYPSoft FTP Server LIST Command Traversal Arbitrary Directory Listing

Using 'cd ...', it is possible to move from the FTP server root directory and access any file on the remote machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: From: [email protected] To: [email protected] Date: 18 Dec 2002 00:40:44 +0200 Subject: NT TYPSoft FTP Serve...

phpGroupWare Wiki Module XSS

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. This issue exists due to a lack of sanitization of user-supplied data. A malicious attacker can exploit a flaw to conduct cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Fedora Core 1 : cdrtools-2.01-0.a19.2.FC1.1 (2004-297)

Anyone who has manually suid /usr/bin/cdrecord should update to this version. https://vulners.com/cve/CVE-2004-0806 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora Core 1 : imlib-1.9.13-15.fc1 (2004-300)

Several heap overflow vulnerabilities have been found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with imlib to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities...

Mandrake Linux Security Advisory : cdrecord (MDKSA-2004:091)

Max Vozeler found that the cdrecord program, which is suid root, fails to drop euid=0 when it execs a program specified by the user through the $RSH environment variable. This can be abused by a local attacker to obtain root privileges. The updated packages are patched to fix the vulnerability...

Solaris 9 (sparc) : 117162-01

The remote host is missing Sun Security Patch number 117162-01 SunOS 5.9: patch usr/src/uts/common/sys/cpcimpl.h. Date this patch was last updated by Sun : Mon Sep 27 02:48:32 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Ipswitch IMail Server < 8.13.0 Multiple Vulnerabilities

Binary data 2257.prm...

AIX Technology Level Out of Date

The remote AIX operating system is lagging behind its official Technology Level TL and may therefore be missing critical security patches. NOTE: Findings may be affected by an extended support contract. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

AIX 5.1 : IY49638

The remote host is missing AIX Critical Security Patch number IY49638 SAP applications core dump. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.2 : IY51775

The remote host is missing AIX Critical Security Patch number IY51775 gated deletes broadcast routes. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.1 : IY35542

The remote host is missing AIX Critical Security Patch number IY35542 SECURITY: perfvmmstat extension privilege errors. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Sympa New List Creation Description Field XSS

According to its version number, the installation of Sympa on the remote host contains an HTML injection vulnerability that may allow a user who has the privileges to create a new list to inject HTML tags in the list description field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. based on...

Cfengine cfservd ReceiveTransaction Function Remote Overflow (version check)

Cfengine is running on this remote host. This version has a stack-based buffer overrun vulnerability. An attacker, exploiting this flaw, would need network access to the server as well as the ability to send a crafted transaction packet to the cfservd process. Successful exploitation of this flaw...

CVSTrac Database Plaintext Password Storage

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to .db files that may allow an attacker to gain access to plaintext passwords. Nessus has determined the vulnerability exists on the target simply by looking at...

phpGroupWare Multiple Module SQL Injection

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. It has been reported that this version may be prone to multiple SQL injection vulnerabilities in the 'calendar' and 'infolog' modules. The problems exist due to insufficient sanitization of user-supplie...