5351 matches found
MDaemon POP Server Multiple Command Remote Overflow DoS
According to its banner, the remote POP server has a denial of service vulnerability. Input to the DELE and UIDL commands are not properly handled. A remote, authenticated attacker could exploit this to crash the POP service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
R7-0013: Heap Corruption in Gaim-Encryption Plugin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0013 Heap Corruption in Gaim-Encryption Plugin...
Bugzilla < 2.14.2 / 2.16rc2 / 2.17 Multiple Vulnerabilities (SQLi, XSS, ID, Cmd Exe)
According to its version number, the remote Bugzilla bug tracking system is vulnerable to various flaws, including SQL injection, cross-site scripting, and arbitrary command execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Apache 2.0.x < 2.0.43 Multiple Vulnerabilities (Log Injection, Source Disc.)
The remote host appears to be running a version of Apache 2.0.x prior to 2.0.43. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this vulnerability by making a POST request to files in a folder with both WebDAV and CGI enabled. Note that Nessus solel...
GLSA: ethereal (200303-10)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200303-10 - - --------------------------------------------------------------------- PACKAGE : ethereal SUMMARY : arbitrary code execution DATE...
Automatic File Content Type Recognition Tool contains memory allocation problem
Overview A memory allocation problem exists in the "Automatic File Content Type Recognition Tool" versions of the file1 package prior to 3.41. Description According to an OpenPKG advisory, a memory allocation problem exists in the "Automatic File Content Type Recognition Tool" AFCTR tool versions...
PT-2003-1004 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 0.9.6i OpenSSL versions prior to 0.9.7a OpenSSL-0.9.5a OpenSSL-0.9.6b OpenSSL-devel-0.9.5a OpenSSL-devel-0.9.6b OpenSSL-devel-0.9.6 ssleay affected versions not specified Description: The issue is related to multiple...
ISMail Multiple Command Domain Name Handling Remote Overflow
The remote SMTP server probably ISMail seems to be vulnerable to a buffer overflow which could allow an attacker to gain LOCALSYSTEM privileges on this host. C Tenable Network Security, Inc. Ref: Message-ID: Date: Thu, 27 Feb 2003 15:45:17 -0800 From: "NGSSoftware Insight Security Research" To: ,...
[SECURITY] [DSA 239-1] New kdesdk packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 239-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23rd, 2003 http://www.debian.org/security/faq -...
DSA-218 bugzilla - cross site scripting
Bulletin has no description...
DSA-197 courier - buffer overflow
Bulletin has no description...
DSA-194 masqmail - buffer overflows
Bulletin has no description...
DSA-183 krb5 - buffer overflow
Bulletin has no description...
Apache Tomcat MS-DOS Device Name Request DoS
It was possible to freeze or crash Windows or the Apache Tomcat web server by reading thousands of times an MS/DOS device through the Tomcat servlet engine, using a file name like /examples/servlet/AUX. An attacker can exploit this flaw to make your system crash continuously, preventing you from...
[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem
-------------------------------------------------------------------------- Debian Security Advisory DSA 147-2 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2002 http://www.debian.org/security/faq -...
Viralator CGI Script Arbitrary Command Execution
The CGI 'viralator.cgi' is installed. Some versions of this CGI are don't check properly the user input and allow anyone to execute arbitrary commands with the privileges of the web server. No flaw was tested. Your script might be a safe version. %NASLMINLEVEL 70300 C Tenable Network Security, In...
[SECURITY] [DSA 152-1] New l2tpd packages adds better randomization
-------------------------------------------------------------------------- Debian Security Advisory DSA 152-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : l2tpd...
[SECURITY] [DSA 150-1] New interchange packages fix illegal file exposition
-------------------------------------------------------------------------- Debian Security Advisory DSA 150-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : interchange...
DSA-152 l2tpd - missing random seed
Bulletin has no description...
[SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 140-2 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : libpng, libpng3...