CVE-2006-0263

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB09 in the a Net Listener component; and 2 DB12 and 3 DB13 in the Network Communications RPC...

CVE-2006-0263

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB09 in the a Net Listener component; and 2 DB12 and 3 DB13 in the Network Communications RPC...

CVE-2006-0263

CVE-2006-0263 affects Oracle Database Server versions 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1. The Oracle CPU-Jan-2006 vulnerabilities DB09 (Net Listener) and DB12/DB13 (Network Communications RPC) are cited as the root issues. The described flaws are “unspecified” in impa...

Plexcor's(r) CMS XSS vuln.

Plexcor's® CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcors-cms-xss-vuln.html vendor:http://www.plexcor.com/ affected version: 4.0 and prior Product Description: Integrated modular content, communications, calendar, commerce,...

Microsoft Internet Explorer COM Object Instantiation Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory corruption vulnerability that is related to the instantiation of COM objects. COM objects may corrupt system memory and facilitate arbitrary code execution in the context of the currently logged in user on the affected computer...

Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the...

CVE-2005-4045

Technical details about CVE-2005-4045 are not provided in the supplied documents. The NVD entry mentions an unspecified vulnerability in Sun Java System Messaging Server 2005Q1 enabling TLA password exposure, but vectors, affected versions, and fixes are not disclosed here.

CVE-2005-4045

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability

Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...

Sun Java System Communications Express information leak

It's possible to access configuration file which contains sensitive information...

[SA17395] Sun Java System Communications Express Configuration File Disclosure

TITLE: Sun Java System Communications Express Configuration File Disclosure SECUNIA ADVISORY ID: SA17395 VERIFY ADVISORY: http://secunia.com/advisories/17395/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Sun Java System Communications Express...

CVE-2005-3472

Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files...

CVE-2005-3472

CVE-2005-3472 concerns Sun Java System Communications Express (2005Q1 and 2004Q2). The connected materials confirm the vulnerability allows local and remote attackers to read sensitive information from configuration files (impact: partial confidentiality). The documents do not provide specific ro...

CVE-2005-3472

Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files...

SSL Version 2 and 3 Protocol Detection

The remote service accepts connections encrypted using SSL 2.0 and/or SSL 3.0. These versions of SSL are affected by several cryptographic flaws, including: - An insecure padding scheme with CBC ciphers. - Insecure session renegotiation and resumption schemes. An attacker can exploit these flaws ...

CVE-2005-2329

MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S (3.5.0) have an access-control flaw in SSH public-key authentication that does not properly restrict port access, potentially allowing remote authenticated users to access other users’ consoles. The explicit root cause or remediation is...

CVE-2005-2329

MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users...

CVE-2005-2329

MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users...

RHEL 2.1 : openssh (RHSA-2005:481)

Updated openssh packages that fix a potential security vulnerability and various other bugs are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol...

Low: Red Hat Security Advisory: openssh security update

Updated openssh packages that fix a potential security vulnerability and various other bugs are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol...