bozotic HTTP server Information Disclosure Vulnerability

This host is running bozotic HTTP server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbbozotichttpserverinfodiscvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ bozotic HTTP server Information Disclosure Vulnerability Authors: Sooraj KS Copyright: Copyright c...

CVE-2009-4896

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...

CVE-2009-4896

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...

Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 (java-1.6.0-openjdk)

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 java-1.6.0-openjdk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Checks over WMI, if hiberfile.sys exists - Windows

Checks over WMI, if hiberfile.sys exists. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96051";...

Code injection

pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...

CVE-2010-0750

PolicyKit (libpolkit) vulnerability CVE-2010-0750 affects pkexec in PolicyKit 0.96, where error messages in pkexec disclose the existence of local files via the argument. A local attacker could determine whether arbitrary files exist. The issue is documented across multiple sources (SUSE, Gentoo ...

Mandriva Update for ncpfs MDVSA-2010:061 (ncpfs)

Check for the Version of ncpfs OpenVAS Vulnerability Test Mandriva Update for ncpfs MDVSA-2010:061 ncpfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-4449

MyBB 1.4.10 and earlier are affected by a directory traversal vulnerability in the avatar/gallery change flow, allowing remote authenticated users to infer file existence via traversal sequences in avatar and possibly gallery parameters. The issue concerns files admin/modules/user/users.php and u...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1613)

New icedtea update to fix : - ICCProfile file existence detection information leak; CVE-2009-3728: CVSS v2 Base Score: 5.0 - BMP parsing DoS with UNC ICC links; CVE-2009-3885: CVSS v2 Base Score: 5.0 - resurrected classloaders can still have children; CVE-2009-3881: CVSS v2 Base Score: 7.5 -...

OpenJDK ICC_Profile file existence detection information leak (6631533)

Directory traversal vulnerability in the ICCProfile.getInstance method in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium ICC profile files via a .. dot...

OpenJDK ICC_Profile file existence detection information leak (6631533)

Directory traversal vulnerability in the ICCProfile.getInstance method in Java Runtime Environment JRE in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium ICC profile files via a .. dot...

CVS File Existence Information Disclosure (CVE-2004-0788)

Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...

SuSE9 Security Update : XFree86-libs (YOU Patch Number 12040)

This update fixes various Xserver security issues. - File existence disclosure vulnerability. CVE-2007-5958 - XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. - TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. - EVI Extension Integer Overflow...

SuSE9 Security Update : XFree86-Xnest (YOU Patch Number 12043)

This update fixes various Xserver security issues. - File existence disclosure vulnerability. CVE-2007-5958 - XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. - TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. - EVI Extension Integer Overflow...

IBM Lotus Notes Version Detection (Windows)

This script detects the installed version of IBM Lotus Notes and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodibmlotusnotesdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ IBM Lotus Notes Version Detection Windows Authors: Antu Sanadi Updated By: Antu Sanadi on 2010-05-04 Updated to...

Directory traversal

Directory traversal vulnerability in Advanced Electron Forum AEF 1.x allows remote attackers to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message. NOTE: the provenance of this information i...

DEBIAN-CVE-2009-2336

The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue,...

Sun Java Directory Server Information Disclosure Vulnerability (Windows)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Windows Authors: Sujit...

Sun Java Directory Server Information Disclosure Vulnerability (Linux)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Linux Authors: Sujit...