Fedora Core 4 : postgresql-8.0.8-1.FC4.1 (2006-579)

Mon May 22 2006 Tom Lane 8.0.8-1.FC4.1 - Update to PostgreSQL 8.0.8 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to jdbc driver build 316 - Suppress noise from chcon, per bug 187744 - Repair extraneous quote in pgtcl configure script ... odd that bash didn't use to...

Web Directory Pro bypass Vulnerabilities

Web Directory Pro is product of hostingfrenzy.com I check latest version and detect some security holes, attackers can backup database or re-config system: 1. Backup database: http://domain/path/admin/backupdb.php 2. Re-config system: http://domain/path/admin/options.php Note: If IE cannot downlo...

TWiki 4.0.4 - Configure Script Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

TWiki configure Script Arbitrary Command Execution

The version of TWiki installed on the remote host uses an unsafe 'eval' in the 'bin/configure' script that can be exploited by an unauthenticated attacker to execute arbitrary Perl code subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2006-3819

Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF"...

Design/Logic Flaw

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...

CVE-2006-2452

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...

CVE-2006-2452

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...

Design/Logic Flaw

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the 1 admin.php or 2 settings.php page...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2006:056)

Versions of Xorg 6.9.0 and greater have a bug in xf86Init.c, which allows non-root users to use the -modulepath, -logfile and -configure options. This allows loading of arbitrary modules which will execute as the root user, as well as a local DoS by overwriting system files. Updated packages have...

Oracle Applications One-Hour Install Detect

We detected the remote web server as an Oracle Applications' One-Hour Install web server. This web server enables attackers to configure your Oracle Application server and Oracle Database server without any need for authentication. OpenVAS Vulnerability Test $Id: oracleonehourinstall.nasl 8023...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

Mandrake Linux Security Advisory : zlib (MDKSA-2003:033)

Richard Kettlewell discovered a buffer overflow vulnerability in the zlib library's gzprintf function. This can be used by attackers to cause a denial of service or possibly even the execution of arbitrary code. Our thanks to the OpenPKG team for providing a patch which adds the necessary configu...

Gnutella Root Directory Misconfiguration

The remote host is running the Gnutella servent service. It seems that the root directory of the remote host is visible through this service. Confidential files might be exported. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11716; scriptversion "1.13";...

CVE-2001-0048

CVE-2001-0048 affects Microsoft Windows 2000 domain controllers; the Configure Your Server tool installs a blank Directory Service Restore Mode password. This allows attackers with physical access to the controller to install malicious software. Root cause is a blank DS Restore Mode password crea...

ralfchat12.txt

RALF'S CHAT V.12 - http://www.ralfchat.de Ralf's Chat is a free cgi based chat program. But Ralf's Chat has some awful bugs in it. I played myself with the CGI and discovered that the masterpassword is set by a default password called: mpw So, if someone else who carries on this chatedited the...

PT-1998-1072 · Oracle · Solaris

Name of the Vulnerable Software and Affected Versions: Solaris affected versions not specified Description: The issue is related to a buffer overflow in the kcms configure command, which allows local users to gain root access. Recommendations: At the moment, there is no information about a newer...