[SECURITY] [DSA 964-1] New gnocatan packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 964-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 964-1] New gnocatan packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 964-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 957-2 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 957-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 919-1] New curl packages fix potential security problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 919-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2005 http://www.debian.org/security/faq -...

PHP Doc System index.php show Parameter Local File Inclusion

The remote host is running PHP Doc System, a modular, PHP-based system for creating documentation. The version of PHP Doc System installed on the remote host fails to sanitize user input to the 'show' parameter of the 'index.php' script before using it in a PHP 'include' function. An...

[SECURITY] [DSA 903-1] New unzip packages fix unauthorised permissions modification

-------------------------------------------------------------------------- Debian Security Advisory DSA 903-1 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 807-1] New mod_ssl packages fix acl restriction bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 807-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 783-1] New mysql packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 783-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 776-1] New clamav packages fix several problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 776-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2005 http://www.debian.org/security/faq -...

x_aix5_bellmail.pl.txt

-bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfile : then file wich you want to cho...

Gallery PostNuke Integration Access Validation Privilege Escalation

The remote host is running Gallery, a web-based photo album. According to its banner, the version of Gallery installed on the remote host is subject to an access validation issue when integrated with PostNuke, as is the case on the remote host. The issue means that any user with any level of admi...

Community Link Pro login.cgi file Parameter Arbitrary Command Execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software fails to sanitize user input to the 'file' parameter of the 'login.cgi' script of shell metacharacters before using it to run a command. An unauthenticated attacker can...

SUSE-SA:2005:034: opera

The remote host is missing the patch for the advisory SUSE-SA:2005:034 opera. The web browser Opera has been updated to version 8.01 to fix various security-related bugs. Fixed XMLHttpRequest redirect vulnerability reported in Secunia Advisory 15008. Fixed cross-site scripting vulnerability...

Rhapsody vidplin.dll AVI Processing Heap Overflow Vulnerability

The remote installation of Rhapsody has a heap overflow in the 'vidplin.dll' file used to process AVI files. With a specially- crafted AVI file, an attacker can exploit this flaw to cause arbitrary code to be run within the context of the affected application when a user opens the file. C Tenable...

FlexCast Server Terminal Authentication Unspecified Remote Issue

The remote host is running FlexCast, an audio/video streaming server. According to its banner, the version installed on the remote host suffers from a vulnerability in suppliers / terminal authentication. While details are as-yet unavailable, it is likely the flaw is remotely exploitable...

Oracle Database 9i/10g Fine Grained Auditing (FGA) SELECT Statement Logging Weakness

The remote host is running a version of Oracle Database that, according to its version number, suffers from a flaw in which Fine Grained Auditing FGA becomes disabled when the user SYS runs a SELECT statement. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a victim's browser, allowing the attacker to steal cookie-based credentials a...

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 - Multiple Cross-Site Scripting Vulnerabilities Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities because the software fails to properly sanitize user-supplied data. Exploits will allow arbitrary HTML and script code to run in a...

[SECURITY] [DSA 706-1] New axel packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 706-1 [email protected] http://www.debian.org/security/ Martin Schulze April 13th, 2005 http://www.debian.org/security/faq -...