Oracle Linux 4 : bind (ELSA-2012-1365)

Description of changes: 20:9.2.4-38.0.2.el4 - fix CVE-2012-4244 Adam Tkac orabz 14518 - fix CVE-2012-5166 Adam Tkac orabz 14518 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory...

Oracle Linux 6 : glibc (ELSA-2012-1208)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1208 advisory. 2.12-1.80.el63.5 - Fix integer overflow leading to buffer overflow in strto and related out of bounds array index 847931 Tenable has extracted the preceding...

ELSA Lancom information leak

Administrative password can be obtained by remote user in cleartextwith Web interface...

[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users

It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...

CVE-2001-1223

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...

CVE-2001-1223: Undefined Security Weakness

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server...

CVE-2001-1223

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server...