Mandrake Security Advisory MDVSA-2009:097 (clamav)

The remote host is missing an update to clamav announced via advisory MDVSA-2009:097. OpenVAS Vulnerability Test $Id: mdksa2009097.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:097 clamav Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Update Protection against Net-SNMP Denial of Service

Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3. Net-SNMP is available for many Unix and Unix-like operating systems and also for Microsoft Windows. Net-SNMP is vulnerable to a denial of service that can be triggerred by sending a specially-crafted SNMP GETBULK...

[SECURITY] Fedora 10 Update: nss-3.12.2.0-4.fc10

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

openssl, openssl095a, openssl096 security update

CentOS Errata and Security Advisory CESA-2009:0004-01 Updated OpenSSL packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSL is a toolkit...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

Exploit for unknown platform in category remote exploits ================================================================ Synactis AllINTHEBOX ActiveX v3 Null byte File Overwrite Vuln ================================================================ Digital Security Research Group DSecRG Advisory...

Aj Classifieds - Personals v3 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== Aj Classifieds - Personals v3 Remote Shell Upload Vulnerability =============================================================== AJClassifieds Personals RFu script down:...

Authentication flaw

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

Sql injection

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

Authentication flaw

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5783

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5784

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5785

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5785

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5785

CVE-2008-5785 affects V3 Chat - Profiles/Dating Script 3.0.2. The vulnerability is a SQL injection in the login mechanism, exploitable via the username and password fields, allowing remote execution of arbitrary SQL commands. The available sources confirm the affected product and the injection ve...

CVE-2008-5783

The CVE-2008-5783 entry concerns V3 Chat Live Support 3.0.4. The vulnerability arises in admin/index.php where setting the admin cookie to 1 allows remote attackers to bypass authentication and gain administrative access. The NVD description confirms this cookie-based authentication bypass and el...

CVE-2008-5784

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5783

admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5784

CVE-2008-5784 affects V3 Chat – Profiles/Dating Script 3.0.2. The root cause is an authentication bypass: setting the admin cookie to 1 grants remote attackers administrative access. Impact is described as remote authentication bypass with full admin privileges (per the sources). There is no expl...

PT-2008-6834 · V3 · V3 Chat

Name of the Vulnerable Software and Affected Versions: V3 Chat - Profiles/Dating Script version 3.0.2 Description: The issue allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1. Recommendations: For version 3.0.2, as a temporary...

CVE-2008-5520

AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a...