CVE-2005-1720: Undefined Security Weakness

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...

CVE-2005-1897: Undefined Security Weakness

Unknown vulnerability in FlexCast Audio Video Streaming Server before 2.0 has unknown impact and attack vectors...

CVE-2004-2135

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...

Remote Desktop Protocol Server Man-in-the-Middle Weakness

The remote version of the Remote Desktop Protocol Server Terminal Service is vulnerable to a man-in-the-middle MiTM attack. The RDP client makes no effort to validate the identity of the server when setting up encryption. An attacker with the ability to intercept traffic from the RDP server can...

[EXPL] Linux Cryptoloop Watermark Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Mac OS X < 10.4 pty Permission Weakness

The remote host is running a version of Mac OS X which is older than version 10.4. Versions older than 10.4 contain a security issue in the way they handle the permissions of pseudo terminals. When an application uses a new pseudo terminal, it can not restrict its permissions to a safe mode. As a...

[Full-disclosure] D-Link DSL routers authentication bypass

====================== SUMMARY ======================== Title: D-Link DSL routers authentication bypass Date: 19 May 2005 Author: Francesco Orro francesco.orro 4t akhela.com Product: DSL-502T, DSL-504T, DSL-562T, DSL-G604T Vendor: D-Link Vendor URL: http://www.dlink.com Vendor Status: D-Link was...

CVE-2004-1851

Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing...

CVE-2004-2001: Undefined Security Weakness

ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received...

Oracle Database 9i/10g Fine Grained Auditing (FGA) SELECT Statement Logging Weakness

The remote host is running a version of Oracle Database that, according to its version number, suffers from a flaw in which Fine Grained Auditing FGA becomes disabled when the user SYS runs a SELECT statement. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2005-1449: Undefined Security Weakness

Unknown vulnerability in serendipityconfiglocal.inc.php for Serendipity before 0.8 has unknown impact...

CVE-2005-1452: Undefined Security Weakness

Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."...

CVE-2005-0106: Undefined Security Weakness

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...

CVE-2005-1345: Undefined Security Weakness

Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator...

DameWare NT Utilities Authentication Credentials Persistence Weakness

According to its version number, the copy of DameWare NT Utilities installed on the remote host allows a local user to recover authentication credentials because it stores sensitive information such as username, password, remote user, and remote hostname in memory as plaintext. C Tenable Network...

[SA15038] netMailshar Professional Two Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...

CVE-2005-1069: Undefined Security Weakness

Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page."...

[SA14813] Adobe Reader Local Files Detection Weakness

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Adobe Reader Local Files Detection Weakness SECUNIA...

possible SQL injection in Subdreamer

//==========================================// GHC - Subdreamer - ADVISORY // Product: Subdreamer Version: Subdreamer Light // URL: www.subdreamer.com VULNERABILITY CLASS: SQL injection //==========================================// Product Description "Powered by PHP and MySQL, Subdreamer provid...

SHA family hash functions cryptographic weakness

Cryptographic weakness found making real strength against coliisions: collisions in the the full SHA-1 in 269 hash operations, much less than the brute-force attack of 280 operations based on the hash length. Collisions in SHA-0 in 239 operations. Collisions in 58-round SHA-1 in 233 operations...