4597 matches found
DSA-1174-1 openssl096 - cryptographic weakness
Bulletin has no description...
DSA-1173-1 openssl - cryptographic weakness
Bulletin has no description...
Joomla! < 1.0.11 administrator/index.php Input Weakness
The version of Joomla! installed on the remote host is affected by an input weakness flaw in the administrator/index.php script due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to impact confidentiality, integrity, or availability. No other...
Apache 1.3.352.0.582.2.2 - Arbitrary HTTP Request Headers Security
Apache 1.3.352.0.582.2.2 - Arbitrary HTTP Request Headers Security source: https://www.securityfocus.com/bid/19661/info Apache HTTP server is prone to a security weakness related to HTTP request headers. An attacker may exploit this issue to steal cookie-based authentication credentials and launc...
Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security
source: https://www.securityfocus.com/bid/19661/info Apache HTTP server is prone to a security weakness related to HTTP request headers. An attacker may exploit this issue to steal cookie-based authentication credentials and launch other attacks. var req:LoadVars=new LoadVars;...
PSWD.JS - Insecure Password Hash
PSWD.JS - Insecure Password Hash / source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers...
PSWD.JS - Insecure Password Hash
/ source: https://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers to use precomputed password hash...
CentOS 4 : pam (CESA-2005:805)
An updated pam package that fixes a security weakness is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. PAM Pluggable Authentication Modules is a system security tool that allows system administrators t...
[SA19480] Opera SSL Certificate "Stealing" Weakness
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
Crack MSSQL HASH password-vulnerability warning-the black bar safety net
Original name :Microsoft SQL Server Passwords Cracking the password hashes Original address :http://www.ngssoftware.com/papers/cracking-sql-passwords.pdf Author :David Litchfield [email protected] Term : FreeXploiT Author : ALLyeSNO Date : 2005-3-25 Translation:ALLyeSNO [email protected]...
[SA20277] Tor Weakness and Multiple Vulnerabilities
TITLE: Tor Weakness and Multiple Vulnerabilities SECUNIA ADVISORY ID: SA20277 VERIFY ADVISORY: http://secunia.com/advisories/20277/ CRITICAL: Moderately critical IMPACT: WHERE: From remote SOFTWARE: Tor 0.1.0.x http://secunia.com/product/5269/ DESCRIPTION: Some vulnerabilities and a weakness have...
[Full-disclosure] rPSA-2006-0080-1 postgresql postgresql-server
rPath Security Advisory: 2006-0080-1 Published: 2006-05-24 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Local System User Deterministic Vulnerability Updated Versions: postgresql=/conary.rpath.com@rpl:devel//1/8.1.4-1-0.1...
Microsoft Windows - Path Conversion
Microsoft Windows - Path Conversion source: https://www.securityfocus.com/bid/17934/info Microsoft Windows is susceptible to a path-conversion weakness that may allow attackers to bypass security applications. This issue occurs because the operating system uses multiple differing algorithms to...
Microsoft Windows - Path Conversion
source: https://www.securityfocus.com/bid/17934/info Microsoft Windows is susceptible to a path-conversion weakness that may allow attackers to bypass security applications. This issue occurs because the operating system uses multiple differing algorithms to resolve file paths. Attackers may...
[SA19824] Phex Chat Request Handling Weakness
TITLE: Phex Chat Request Handling Weakness SECUNIA ADVISORY ID: SA19824 VERIFY ADVISORY: http://secunia.com/advisories/19824/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote SOFTWARE: Phex 2.x http://secunia.com/product/9604/ DESCRIPTION: A weakness has been reported in Phex, which can be...
[SA19662] Web+Shop "storeid" Full Path Disclosure Weakness
TITLE: Web+Shop "storeid" Full Path Disclosure Weakness SECUNIA ADVISORY ID: SA19662 VERIFY ADVISORY: http://secunia.com/advisories/19662/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Web+Shop 5.x http://secunia.com/product/9262/ DESCRIPTION: Revnic...
RHEL 3 / 4 : freeradius (RHSA-2006:0271)
Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...
Nuked-klaN 1.x - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/17233/info Nuked-Klan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
[SA19338] Baby FTP Server File Enumeration Weakness
TITLE: Baby FTP Server File Enumeration Weakness SECUNIA ADVISORY ID: SA19338 VERIFY ADVISORY: http://secunia.com/advisories/19338/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Baby FTP Server 1.x http://secunia.com/product/1626/ DESCRIPTION: Ziv Kami...
[SECURITY] [DSA 996-1] New Crypt::CBC packages fix cryptographic weakness
-------------------------------------------------------------------------- Debian Security Advisory DSA 996-1 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...