1542 matches found
trendmicro.txt
TrendMicro Interscan Viruswall Directory Traversal ================================================= PROGRAM: TrendMicro Interscan Viruswall HOMEPAGE: http://www.trendmicro.com VULNERABLE VERSIONS: - 3.5x Windows - Unix/Solaris version is not tested but possibly vulnerable DESCRIPTION...
TrendMacro Interscan Viruswall Directory Traversal
TrendMacro Interscan Viruswall Directory Traversal ================================================= PROGRAM: TrendMacro Interscan Viruswall HOMEPAGE: http://www.trendmicro.com VULNERABLE VERSIONS: - 3.5x Windows - Unix/Solaris version is not tested but possibly vulnerable DESCRIPTION...
[SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 457-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 8th, 2004 http://www.debian.org/security/faq -...
Extremail password weakness
It's psosible to access without passwords if password begins with digit...
wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed
Glenn Stewart reports a bug in wu-ftpd's ftpaccess restricted-uid'/restricted-gid' directives: Users can get around the restriction to their home directory by issuing a simple chmod command on their home directory. On the next ftp log in, the user will have '/' as their root directory. Matt...
[Full-Disclosure] SRT2004-01-17-0425 - Ultr@VNC local SYSTEM access.
Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...
CVE-2004-1764
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors...
Planet switches - 2 серия
Добрый день. Если помните, http://www.security.nnov.ru/search/news.asp?binid=3174 Та же "закладка" присутствует в Planet WSW-2401. Тот же пользователь, тот же пароль. Проблема усугубляется тем, что управляющий IP-интерфейс доступен через ЛЮБОЙ 802.1q-VLAN, присутствующий в свитче. Это касается и...
DATEV Nutzungskontrolle 2.12.2 - Unauthorized Access
DATEV Nutzungskontrolle 2.12.2 - Unauthorized Access source: https://www.securityfocus.com/bid/8950/info It has been reported that DATEV Nutzungskontrolle may be prone to a access validation issue that may allow a local attacker to gain access to sensitive data. The issue presents itself as a loc...
CVE-2003-0699
The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...
Trillian v.0.74* Remote DoS
Advisory Название : Trillian v.0.74 - удаленная DoS Сайт : www.trillian.cc Платформа : win32 Автор : lobsta/h [email protected] Информация о программном продукте Trillian - популярный чат-клиент, поддерживающий IRC, AIM, ICQ, MSN Messenger, и Yahoo! Messenger. Примечание к статье Основным отличие...
miniPortail (PHP) : Admin Access
Informations : °°°°°°°°°°°°°° Language : PHP Website : http://www.aldweb.com/ Version : 1.9, 2.0, 2.1, 2.2 and less ? Problem : Admin Access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/admin.php :...
CVE-2002-0009
showbug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu...
Apache 2.0.x < 2.0.43 Multiple Vulnerabilities (Log Injection, Source Disc.)
The remote host appears to be running a version of Apache 2.0.x prior to 2.0.43. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this vulnerability by making a POST request to files in a folder with both WebDAV and CGI enabled. Note that Nessus solel...
Myguestbook (PHP)
Informations : °°°°°°°°°°°°°° Version : 3.0 Website : http://www.tefonline.net/ Problems : - XSS - admin infos recovery - Access to admin pages PHP Code/Location : °°°°°°°°°°°°°°°°°°° If pseudo = SCRIPT, e-mail = SCRIPT or message = /textareaSCRIPT SCRIPT will be executed on index.php,...
[SECURITY] [DSA 225-1] New tomcat packages fix source disclosure vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 225-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2002 http://www.debian.org/security/faq -...
RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability
RAZOR advisory: Linux kernel 2.2.x /proc/pid/mem mmap vulnerability Issue Date : 12/17/2002 Contact : Michal Zalewski [email protected] CVE number : CAN-2002-1380 Topic: A locally exploitable system crash vulnerability is present in the Linux kernel, versions 2.2.x. The system is likely...
Anyone can read all XOOPS private messages
www.phpsecure.org advisory. In french : http://www.phpsecure.org/?zone=pComment&d=101 By valdeux Publiacted on december, 13th 2002 As most part of PHP CMS, XOOPS allows users to send and receive Private Messages PMs, that are saved on the DataBase. We found how all messages are readable. And sure...
CVE-2002-1250
Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument...
[SECURITY] [DSA 177-1] New PAM packages fix serious security violation in Debian/unstable
-------------------------------------------------------------------------- Debian Security Advisory DSA 177-1 [email protected] http://www.debian.org/security/ Martin Schulze October 17th, 2002 http://www.debian.org/security/faq -...