CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5741

AirMagnet Enterprise (before 7.5 build 6307) is affected by multiple XSS vulnerabilities. The affected component is the Enterprise Web interface and related log viewer, with vectors including (1) the Smart Sensor Edge Sensor 404 error page, (2) the failed-login username displayed in the audit jou...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

HP NonStop Server非授权目录访问漏洞

惠普NonStop是一款容错服务器，可进行全面的故障检测和隔离，并保护数据的完整性。 NonStop服务器在处理目录访问权限时存在漏洞，本地攻击者可能利用此漏洞获取非授权访问。 在运行G06.29的HP NonStop Server上，如果没有分配可选的访问控制列表（ACL）项的话，就无法正确的评估目录权限。这可能对OSS目录造成安全漏洞，可能导致非授权的本地访问。 HP NonStop Server G06.29 临时解决方法： 首先备份2版本的文件组并升级到3版本： SCF DIAGNOSE FILESET $ZPMON.fileset, UPGRADE...

FreeBSD : openldap -- slapd acl selfwrite Security Issue (ae7124ff-547c-11db-8f1a-000a48049292)

Howard Chu reports : An ACL of the form 'access to dn.subtree='ou=groups, dc=example,dc=com' attr=member by selfwrite' is intended to only allow users to add/delete their own DN to the target attribute. Currently it allows any DNs to be modified. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2006-4650: Undefined Security Weakness

Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2006-4600: Undefined Security Weakness

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

CVE-2006-4600

CVE-2006-4600 affects OpenLDAP (OpenLDAP earlier than 2.3.25) where users with selfwrite ACL privileges could modify the distinguished name (DN) of any entry. The connected advisories (RHSA-2007:0310/0430, ELSA-2007-0310/0430, etc.) indicate a flaw in how selfwrite access is handled and describe ...

CVE-2006-4600

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN...

OpenLDAP privilege escalation

User with 'selfwrite' ACL parameter can modify any attributes...

CVE-2006-4476

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via 1 globals.php, which uses includeonce instead of require; 2 the $options variable; 3 Admin Upload Image; 4 -load; 5 content submissions when frontpage is...

CVE-2006-4476: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via 1 globals.php, which uses includeonce instead of require; 2 the $options variable; 3 Admin Upload Image; 4 -load; 5 content submissions when frontpage is...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0575 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

CVE-2006-4184

SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists ACL in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information...

CVE-2006-4184

SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists ACL in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information...

CVE-2006-4184

SmartLine DeviceLock before 5.73 Build 305 has an ACL enforcement issue in raw mode that allows local users to bypass NTFS controls and obtain sensitive information. Root cause: improper ACL handling in raw mode. Impact: local privilege or information exposure as described in the CVE notes. Explo...

CVE-2006-4184: Undefined Security Weakness

SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists ACL in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information...

KLA10136 OSI vulnerability in DeviceLock

Improper ACL enforcing was found in DeviceLock. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited locally. Original advisories - Exploitation Related products DeviceLock CVE list CVE-2006-4184 warning Solution Update to latest...

RHEL 4 : kernel (RHSA-2006:0575)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...