D-Link AirPlus DI-614+ / DI-624 / DI-704 - DHCP Log HTML Injection

source: https://www.securityfocus.com/bid/10587/info It is reported that the DI-614+, DI-704, and the DI-624 are susceptible to an HTML injection vulnerability in their DHCP log. An attacker who has access to the wireless, or internal network segments of the router can craft malicious DHCP...

Microsoft Internet Explorer 6 - URL Local Resource Access

source: https://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Internet Explorer 6 SP1. Specifically, a...

OpenBB 1.0.x - board.php?FID SQL Injection

OpenBB 1.0.x - board.php?FID SQL Injection source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL...

1st Class Mail Server 4.0 1 - viewmail.tagz Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

[SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa)

-------------------------------------------------------------------------- Debian Security Advisory DSA 475-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 475-1] New Linux 2.4.18 packages fix several local root exploits (hppa)

-------------------------------------------------------------------------- Debian Security Advisory DSA 475-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2004 http://www.debian.org/security/faq -...

DSA-475 linux-kernel-2.4.18-hppa - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa)

-------------------------------------------------------------------------- Debian Security Advisory DSA 470-1 [email protected] http://www.debian.org/security/ Martin Schulze April 1st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 470-1] New Linux 2.4.17 packages fix several local root exploits (hppa)

-------------------------------------------------------------------------- Debian Security Advisory DSA 470-1 [email protected] http://www.debian.org/security/ Martin Schulze April 1st, 2004 http://www.debian.org/security/faq -...

DSA-470 linux-kernel-2.4.17-hppa - several vulnerabilities

Bulletin has no description...

Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient sanitization of user-supplied data via the 'img', 'cat',...

PWebServer 0.3.x - Directory Traversal

source: https://www.securityfocus.com/bid/9817/info It has been reported that PWebServer is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied URI requests. Information acquired by exploiting this issue may be...

[SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips)

-------------------------------------------------------------------------- Debian Security Advisory DSA 450-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 450-1] New Linux 2.4.19 packages fix several local root exploits (mips)

-------------------------------------------------------------------------- Debian Security Advisory DSA 450-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2004 http://www.debian.org/security/faq -...

DSA-450 linux-kernel-2.4.19-mips - several vulnerabilities

Bulletin has no description...

Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow

/================CRPT - FrenchTeam ================= Coromputer Security Advisory - CRPTSA-01 =================== Summary ===================== Software : GateKeeper Pro 4.7 Platforms : win32 Risk : High Impact : Buffer overflow Release Date : 2004-02-23 =================== Description...

Jigsaw < 2.2.4 Unspecified URI Parsing Unspecified Vulnerability

According to its banner, the remote version of Jigsaw web server has an unspecified vulnerability related to the way it parses URIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12071; scriptversion"1.16"; scriptcveid"CVE-2004-2274"; scriptbugtraqid9711;...

smallftpd 1.0.3 Multiple DoS

The remote host seems to be running a version of Smallftpd that is 1.0.3 or earlier. Such versions are reportedly affected by denial of service and directory traversal vulnerabilities. This script was written by Audun Larsen Changes by Tenable: - Revised plugin title, changed family 2/03/2009 -...

[SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390)

-------------------------------------------------------------------------- Debian Security Advisory DSA 442-1 [email protected] http://www.debian.org/security/ Martin Schulze February 19th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390)

-------------------------------------------------------------------------- Debian Security Advisory DSA 442-1 [email protected] http://www.debian.org/security/ Martin Schulze February 19th, 2004 http://www.debian.org/security/faq -...