DEBIAN-CVE-2008-2285

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

CVE-2008-2285

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

Zabbix (zabbix_agentd) denial of service

Hello, There is some DoS issue with zabbix which can be exploited by a malicious user from an authorized host. ------------------------ An attacker on the authorized host can cause the zabbixagentd to hang, overconsuming CPU resources. This can be triggered by sending the agent a file checksum...

Design/Logic Flaw

MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements...

CVE-2007-6313

MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements...

CVE-2007-6313: Undefined Security Weakness

MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements...

EFS encryption techniques of conceptual analysis and a decryption pass-vulnerability warning-the black bar safety net

EFSEncrypting File System, Encrypting File Systemencryption is based on the NTFS disk art encryption technology. EFS encryption is based on Public Key Policies. Using EFS to encrypt a file or folder, the system will first generate a pseudo-random number consisting of a FEKFile Encryption Key file...

memcached Detection

memcached, a memory-based object store, is listening on the remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26197; scriptversion"1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"memcached Detection"; scriptsummaryenglish:'Sends stats command to...

HP-UX PHNE_35351 : s700_800 11.11 cumulative ARPA Transport patch

s700800 11.11 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP IPv4. This vulnerability could be remotely exploited to cause a Denial of Service DoS. HPSBUX01137...

[USN-487-1] Dovecot vulnerability

=========================================================== Ubuntu Security Notice USN-487-1 July 17, 2007 dovecot vulnerability CVE-2007-2231 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.0...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

[Aria-Security Team] MyBB Cross-Site Scripting

Aria-Security Team http://Aria-Security.com http://www.aria-security.com/forum/showthread.php?p=144 Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: MyBB Explanation: First of all user...

WebDAV Directory Enumeration

WebDAV is an industry standard extension to the HTTP specification. It adds a capability for authorized users to remotely add and manage the content of a web server. If you do not use this extension, you should disable it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

PT-2006-6935 · Symantec · Symantec Livestate 7.1 Agent For Windows

Name of the Vulnerable Software and Affected Versions: Symantec LiveState 7.1 Agent for Windows Description: The issue allows local users to potentially gain privileges by stopping the shstart.exe process and opening "Web Self-Service" from the system tray icon. This action opens a browser window...

SuSE Linux Kernel非授权操作SCS设备固件漏洞

BUGTRAQ ID: 11784 CVECAN ID: CVE-2004-1190 SuSE Linux是一款开放源代码Linux系统。 SuSE Linux对SCSI设备接口的管理存在漏洞，本地攻击者可能利用此漏洞非授权修改破坏设备的固件。 SuSE Linux可能允许本地攻击者覆盖小型计算机系统接口（SCSI）设备的固件。拥有只读访问权限的本地攻击者可以向SCSI设备发送SCSI命令覆盖固件，导致设备永久的不可恢复的失效，可能必须送回厂商才能修复。 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux 9.0 RedHat ------...

Mandrake Linux Security Advisory : MySQL (MDKSA-2006:111)

Mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service crash via a NULL second argument to the strtodate function. MySQL 4.0.18 in Corporate 3.0 and MNF 2.0 is not affected by this issue. Packages have been...

HP-UX PHCO_34814 : HP-UX Running Software Distributor Local Elevation of Privilege (HPSBUX02114 SSRT061115 rev.1)

s700800 11.04 VVOS Software Distributor SD Cuml Patch : Potential security vulnerabilities have been identified with HP-UX running Software Distributor. These vulnerabilities could be exploited by a local authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

HP-UX PHCO_34539 : HP-UX Running Software Distributor Local Elevation of Privilege (HPSBUX02114 SSRT061115 rev.1)

s700800 11.11 Software Distributor Cumulative Patch : Potential security vulnerabilities have been identified with HP-UX running Software Distributor. These vulnerabilities could be exploited by a local authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2006-2312: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...

HP-UX PHNE_34543 : HP-UX Running wu-ftpd Remote Denial of Service (DoS) (HPSBUX02110 SSRT061110 rev.1)

s700800 11.00 ftpd1M and ftp1 patch : A potential vulnerability has been identified with HP-UX running wu-ftpd where the vulnerability could be exploited by an authorized remote user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...