9391 matches found
Sawmill < 7.1.6 Multiple Vulnerabilities
Binary data 2947.prm...
DEBIAN-CVE-2005-1521
Integer overflow in the fetchio function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow...
[Full-Disclosure] : [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection
Summary: vbulletin 3.0.6 and below php code injection Description =========== vBulletin is a powerful, scalable and fully customizable forums package for your web site. It has been written using the Web's quickest-growing scripting language; PHP, and is complimented with a highly efficient and...
CVE-2005-0173
squidldapauth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists ACLs via a username with a space at the beginning or end, which is ignored by the LDAP server...
RHSA-2003-145: kernel (deprecated)
The remote host is running a kernel which is vulnerable to a remote denial of service. The Linux kernel handles all the low-level functionality of the Operating System. This version of the kernel is vulnerable to a flaw wherein a remote attacker can forge source IP addresses in such a way as to...
Microsoft Exchange 2003 OWA NTLM wrong mailbox access
If NTLM authentication is used with front-end server it possible random access to wrong mailbox...
SQL injection vulnerability in phpnuke
Multiple researchers have discovered multiple SQL injection vulnerabilities in some versions of Php-Nuke. These vulnerabilities may lead to information disclosure, compromise of the Php-Nuke site, or compromise of the back-end database...
Outlook \r expliots - ripMIME fix.
A recent announcement of ripMIME 1.2.12 has been superceded with a new release which covers several issues as mentioned in [email protected]'s content-exploits analysis post. Specifically, "0 data poisoning" and "fake-end-of-line termination" due to fgets have been immediately covered. Issu...
CVE-2000-1075: Undefined Security Weakness
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. dot dot attack in the Agent, End Entity, or Administrator services...
Netscape Directory Server 4.12 - Directory Server Directory Traversal
Netscape Directory Server 4.12 - Directory Server Directory Traversal source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use ...
Netscape Directory Server 4.12 - Directory Server Directory Traversal
source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use of "../" in a HTTP request. The following services are affected by thi...
[SECURITY] Security policy for Debian 2.1 (slink) (updated)
Debian is phasing out support for Debian 2.1 slink. We believe that this will have a minimal impact on our user community as we expect that most slink users have already upgraded to potato. We had originally announced that support would end Sep 30, 2000. In response to feedback to our earlier...
[SECURITY] Security policy for Debian 2.1 (slink) (updated)
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 21, 2000 - ------------------------------------------------------------------------ Debian is phasing out support for...
[SECURITY] Security update policy for Debian 2.1 (slink)
Debian is phasing out support for Debian 2.1 slink. We believe that this will have a minimal impact on our user community as we expect that most slink users have already upgraded to potato. In order to ease the transition for those who have not yet upgraded, we will provide minimal support until...
Gnome 1.01.1 Group X 11.0 XFree86 X11R6 3.3.x4.0 - Denial of Service
Gnome 1.01.1 Group X 11.0 XFree86 X11R6 3.3.x4.0 - Denial of Service // source: https://www.securityfocus.com/bid/1369/info A denial of service vulnerability exists in libICE, part of the X11 windowing system. Any libICE application which creates inet listening sockets can be remotely crashed. Th...
CVE-1999-0987: Improper Authentication
Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name...
killmod-0.69.lsm
killmod-0.69 killmod.php3 is a php front end that calls a simple shell script killmod.sh and allows you to use the +++ath0 bug to hang up older modems. ------------------------------------------------------------------------------------------------ killmod-0.69.tar.gz contains: --- README...
ROS-2-2380
2.2380 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...
ROS-2-2641
2.2641 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...
ROS-2-2642
2.2642 Notice of Update for RED OS Operating System RU.29926343.02.01-25 REDO SOFT LLC announces that the testing process for RED OS 8 has been completed, and the certified distribution version of RED OS 8 is now available. If you have questions regarding the purchase of a new installation kit...