5474 matches found
Apache Tomcat Directory Listing and File Disclosure
Apache Tomcat prior to 3.3.1a is affected by a directory listing and file disclosure vulnerability. By requesting URLs containing a null character, remote attackers can list directories even when an index.html or other file is present or obtain unprocessed source code for a JSP file. Also note...
Ximian Evolution 1.x - UUEncoding Parsing Memory Corruption
Ximian Evolution 1.x - UUEncoding Parsing Memory Corruption source: https://www.securityfocus.com/bid/7117/info The Evolution mail client supports "uuencoded" content and decodes it automatically when a message is initially parsed. A memory corruption error is present in the parsing component tha...
VPOPMail for SquirrelMail vpopmail.php Arbitrary Command Execution
The remote host is running an old version of vpopmail.php an extension to squirrelmail which allows users to execute arbitrary commands on the remote host with the same privileges as the web server the user is running as. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
IBM Domino nsf File Argument XSS
The version of IBM Domino formerly IBM Lotus Domino running on the remote host is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input when requesting a '.nsf' file. A remote, unauthenticated attacker can exploit this issue, via a crafted URL,...
Solaris sendmail .forward Local Privilege Escalation
The remote sendmail server, according to its version number, may be vulnerable to a local privilege escalation attack when using forward files. Sun did not increase the version number of their sendmail when patching Solaris 7 and 8, so this might be a false positive on these platforms. An attacke...
SSH1 SSH Daemon Logging Failure
The remote host is running SSH Communications Security SSH 1.2.30 or older. The remote version of this software does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute-force attack. This script was written by Xue Yong Zhi See t...
Flash Player < 6.0.79.0 Multiple Unspecified Overflows
The remote host has an old version of the Flash Player plugin installed. An attacker may use this flaw to construct a malicious website with a badly-formed Flash animation that, when viewed using a vulnerable version of the software, will cause a buffer overflow and allow for arbitrary code...
web-erp 0.1.4 database access vulnerability
================================== Security REPORT web-erp 0.1.4 and earlier ================================== Product: web-erp 0.1.4 and earlier Vulnerabilities: full database access Vendor: Phil Daintree http://web-erp.sourceforge.net/ Vendor-Status: E-Mail to "[email protected]" date:...
DSA-253 openssl - information leak
Bulletin has no description...
Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability (#NISR17022003a)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino Web Server Host/Location Buffer Overflow Vulnerability Systems Affected: Release 6.0 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.lotus.com Author: Mark Litchfield [email protected] Date:...
[SECURITY] [DSA 250-1] New w3mmee-ssl packages fix cookie information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 250-1 [email protected] http://www.debian.org/security/ Martin Schulze February 12th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 248-1 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2003 http://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: vim security update
Updated VIM packages are available for Red Hat Linux Advanced Server. These updates resolve a security issue when opening a specially-crafted text file. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 VIM VIsual editor iMproved is a version of the vi editor. VIM allows a use...
[SECURITY] [DSA 242-1] New kdebase packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 242-1 [email protected] http://www.debian.org/security/ Martin Schulze January 24th, 2003 http://www.debian.org/security/faq -...
DSA-239 kdesdk - several vulnerabilities
Bulletin has no description...
DSA-236 kdelibs - several vulnerabilities
Bulletin has no description...
WarFTPd USER/PASS Command Remote Overflow
The version of War FTP Daemon running on this host contains a buffer overflow in the code that handles the USER and PASS commands. A potential intruder could use this vulnerability to crash the server, as well as run arbitrary commands on the system. This script was written by Erik Tayler See the...
DSA-237 kdenetwork - several vulnerabilities
Bulletin has no description...
DSA-235 kdegraphics - several vulnerabilities
Bulletin has no description...
Critical: Red Hat Security Advisory: cvs security update
Updated CVS packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability which would permit arbitrary command execution on servers configured to allow anonymous read-only access. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 CVS is a...