CVE-2005-1737

CVE-2005-1737 affects PROMS 0.11, where multiple unknown vulnerabilities allow non-authorized users to view or modify the project member list and to modify the todos list. The connected documents do not provide explicit root cause, affected versions beyond 0.11, or remediation details. No in‑the‑...

OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage Advisory number: SCOSA-2005.24 Issue date: 2005 May 13 Cross reference: sr893223 fz531468 erg712804 sr893224 fz531469 erg712805...

Trend Micro IWSS Console Management Detection

The remote host appears to run the Trend Micro Interscan Web Security Suite. Make sure that only authorized hosts can connect to this service, as the information of its existence may help an attacker to make more sophisticated attacks against the remote network. C Tenable Network Security, Inc...

CVE-2004-0638

Buffer overflow in the KSDWRTB function in the dbmssystem package dbmssystem.ksdwrt for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument...

[GLSA-200409-14] Samba: Remote printing vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-14 Samba: Remote printing vulnerability Due to a bug in the printernotifyinfo function, authorized users could potentially crash the Samba server by sending improperly handled print change notification requests in an invali...

[Full-Disclosure] iDEFENSE Security Advisory 09.02.04a: Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability

Oracle Database Server dbmssystem.ksdwrt Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.02.04a www.idefense.com/application/poi/display?id=135&type=vulnerabilities September 2, 2004 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databas...

[security bulletin] SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries - elevated privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01034 REVISION: 0 SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries elevated privileges ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

// source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN...

MS Windows XP Workstation Service Remote Exploit (MS03-049)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows XP Workstation Service Remote Exploit MS03-049 =========================================================== / To build new netapi32.lib pedump /exp netapi32.dll...

Sun Java Media Framework (JMF) Arbitrary Code Execution

The remote host is using Sun Microsystems's Java Media Framework JMF. There is a bug in the version installed that may allow an untrusted applet to crash the Java Virtual Machine it is being run on, or even to gain unauthorized privileges. An attacker could exploit this flaw to execute arbitrary...

Network Chemistry Wireless Sensor Detection

The remote host is a WSP100 802.11b Remote Sensor from Network Chemistry. This device sniffs data flowing on the channels used by 802.11b and forwards it to any host which 'subscribes' to this device. An attacker may use this device to sniff 802.11b networks of the area it is deployed from any...

cvsupd-startup.txt

Hi, Better not to file a PR for this, I feel. I was just passing by net/cvsup-mirror/files/cvsupd.sh when I noticed that it appends to the fixed-name file /var/tmp/cvsupd.out Therefore if I were a malicious user, I could make a symlink of that name in /var/tmp to effect arbitrary file corruption...

CVE-1999-1455

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...

CVE-2001-0816

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorizedkeys2 command= restrictions using sftp commands...

PT-2001-2669 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH version 2.3.1 Description: The issue concerns the SSH protocol 2 public key authentication in OpenSSH, which does not perform a challenge-response step to verify that the client has the proper private key. This allows remote attackers...

CVE-2001-0816

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorizedkeys2 command= restrictions using sftp commands...

PT-2001-1065 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: openssh-server versions 2.9p2 through 2.9.8 openssh-clients version 2.9p2 openssh version 2.9p2 openssh-askpass-gnome version 2.9p2 openssh-askpass version 2.9p2 Description: The issue affects the confidentiality, integrity, and availability ...

CVE-2001-0572

The SSH protocols 1 and 2 aka SSH-2 as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: 1 password lengths or ranges of lengths, which simplifies brute force password guessing, 2 whether RSA or DS...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. The SSH protocols 1 and 2 aka SSH-2 as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: 1 password lengths o...

PT-2001-1770 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The SSH protocols 1 and 2 as implemented in OpenSSH have various weaknesses that can allow a remote attacker to obtain sensitive information via sniffing. This includes password lengths or...