Gentoo Security Advisory GLSA 200409-10 (multi-gnome-terminal)

The remote host is missing updates announced in advisory GLSA 200409-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01539423 Version: 1 HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access NOTICE: The information in this Security Bulletin should be...

Debian Security Advisory DSA 1576-2 (openssh)

The remote host is missing an update to openssh announced via advisory DSA 1576-2. OpenVAS Vulnerability Test $Id: deb15762.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1576-2 openssh Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DEBIAN-CVE-2008-2285

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

CVE-2008-2285

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

Zabbix (zabbix_agentd) denial of service

Hello, There is some DoS issue with zabbix which can be exploited by a malicious user from an authorized host. ------------------------ An attacker on the authorized host can cause the zabbixagentd to hang, overconsuming CPU resources. This can be triggered by sending the agent a file checksum...

Design/Logic Flaw

MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements...

CVE-2007-6313

MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements...

EFS encryption techniques of conceptual analysis and a decryption pass-vulnerability warning-the black bar safety net

EFSEncrypting File System, Encrypting File Systemencryption is based on the NTFS disk art encryption technology. EFS encryption is based on Public Key Policies. Using EFS to encrypt a file or folder, the system will first generate a pseudo-random number consisting of a FEKFile Encryption Key file...

memcached Detection

memcached, a memory-based object store, is listening on the remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26197; scriptversion"1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"memcached Detection"; scriptsummaryenglish:'Sends stats command to...

HP-UX PHNE_35351 : s700_800 11.11 cumulative ARPA Transport patch

s700800 11.11 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP IPv4. This vulnerability could be remotely exploited to cause a Denial of Service DoS. HPSBUX01137...

[USN-487-1] Dovecot vulnerability

=========================================================== Ubuntu Security Notice USN-487-1 July 17, 2007 dovecot vulnerability CVE-2007-2231 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.0...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

[Aria-Security Team] MyBB Cross-Site Scripting

Aria-Security Team http://Aria-Security.com http://www.aria-security.com/forum/showthread.php?p=144 Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: MyBB Explanation: First of all user...

WebDAV Directory Enumeration

WebDAV is an industry standard extension to the HTTP specification. It adds a capability for authorized users to remotely add and manage the content of a web server. If you do not use this extension, you should disable it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

PT-2006-6935 · Symantec · Symantec Livestate 7.1 Agent For Windows

Name of the Vulnerable Software and Affected Versions: Symantec LiveState 7.1 Agent for Windows Description: The issue allows local users to potentially gain privileges by stopping the shstart.exe process and opening "Web Self-Service" from the system tray icon. This action opens a browser window...

SuSE Linux Kernel非授权操作SCS设备固件漏洞

BUGTRAQ ID: 11784 CVECAN ID: CVE-2004-1190 SuSE Linux是一款开放源代码Linux系统。 SuSE Linux对SCSI设备接口的管理存在漏洞，本地攻击者可能利用此漏洞非授权修改破坏设备的固件。 SuSE Linux可能允许本地攻击者覆盖小型计算机系统接口（SCSI）设备的固件。拥有只读访问权限的本地攻击者可以向SCSI设备发送SCSI命令覆盖固件，导致设备永久的不可恢复的失效，可能必须送回厂商才能修复。 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux 9.0 RedHat ------...

Mandrake Linux Security Advisory : MySQL (MDKSA-2006:111)

Mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service crash via a NULL second argument to the strtodate function. MySQL 4.0.18 in Corporate 3.0 and MNF 2.0 is not affected by this issue. Packages have been...

HP-UX PHCO_34814 : HP-UX Running Software Distributor Local Elevation of Privilege (HPSBUX02114 SSRT061115 rev.1)

s700800 11.04 VVOS Software Distributor SD Cuml Patch : Potential security vulnerabilities have been identified with HP-UX running Software Distributor. These vulnerabilities could be exploited by a local authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP-UX PHCO_34539 : HP-UX Running Software Distributor Local Elevation of Privilege (HPSBUX02114 SSRT061115 rev.1)

s700800 11.11 Software Distributor Cumulative Patch : Potential security vulnerabilities have been identified with HP-UX running Software Distributor. These vulnerabilities could be exploited by a local authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...