Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

Linux ISO9660 handling flaws

Good morning, There appears to be a fair number of kernel-level range checking flaws in ISO9660 filesystem handler and Rock Ridge / Juliet extensions in Linux up to and including 2.6.11. These bugs range from DoS conditions to potentially exploitable memory corruption - all this whenever a...

Mozilla Firefox < 1.0.2 Multiple Vulnerabilities

Binary data 2704.prm...

CA License Service Multiple Vulnerabilities

The remote host is running the Computer Associate License Application. The remote version of this software is vulnerable to several flaws that could allow a remote attacker to execute arbitrary code on the remote host with SYSTEM privileges. C KK Liu Changes by Tenable: - Fixed the request -...

RealPlayer Multiple Remote Overflows (2005-03-01)

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows might allow an attacker to execute arbitrary code and delete arbitrary files on the remote host. To exploit these flaws, an attacker would send a malformed SMIL or WAV file to a...

RHEL 4 : firefox (RHSA-2005:176)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:176 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is able to...

cycladesReveal.txt

The Cyclades AlterPath Manager APM Console Server is sold to "perform secure remote management of IT assets from anywhere in the world." It provides individual user logins, and allows the APM administrator to restrict users to specific consoles. However, a basic review of the APM management web...

[Full-Disclosure] Cyclades AlterPath Manager Vulnerabilities

The Cyclades AlterPath Manager APM Console Server is sold to "perform secure remote management of IT assets from anywhere in the world." It provides individual user logins, and allows the APM administrator to restrict users to specific consoles. However, a basic review of the APM management web...

zk-mercuryboard.txt

============================================================================== Zeelock-2005 ============================================================================== M E C U R Y B O A R D Critical SQL Injection - Working Exploit...

RHEL 4 : kernel (RHSA-2005:092)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:092 advisory. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues: iSEC Security...

Sybase Adaptive Server Enterprise < 12.5.4.0 Multiple Vulnerabilities

The remote host is running Sybase Adaptive Server Enterprise, a SQL server with network capabilities. The remote version of this software is earlier than 12.5.4.0. Such versions are affected by several unspecified security flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

3Com 3CDaemon FTP Unauthorized "USER" Remote BoF Exploit

Exploit for unknown platform in category remote exploits ======================================================== 3Com 3CDaemon FTP Unauthorized "USER" Remote BoF Exploit ======================================================== / Added " on line 86 /str0ke / / 3com 3CDaemon FTP Unauthorized "USER...

CVE-2005-0463

The CVE-2005-0463 entry pertains to Ulog-php before v1.0 with probable SQL injection flaws due to input validation issues in (1) host.php, (2) port.php, and (3) index.php. Public data provide no confirmed impact or exploit details. CVSS suggests HIGH severity (7.5), but explicit exploitation stat...

CVE-2005-0463

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in 1 host.php, 2 port.php, and 3 index.php...

Important: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix various integer overflows are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team The libtiff package contains a library of functions for manipulating TIFF Tagged Image...

Low: Red Hat Security Advisory: enscript security update

An updated enscript package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU enscript converts ASCII files to PostScript. Enscript has the ability to interpret...

SunShop Shopping Cart index.php search Parameter XSS

The remote host is running SunShop, a web-based shopping cart program written in PHP. The remote version of this software is vulnerable to several input validation flaws, which may allow an attacker to use the remote web site to perform a cross-site scripting attack. %NASLMINLEVEL 70300 C Tenable...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix several security issues are now available for Red Hat Enterprise Linux 3. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Kevin Finisterre discovered a stack based buffer overflow flaw in sperl, the Pe...

PostgreSQL < 7.2.7 / 7.3.9 / 7.4.7 / 8.0.1 Multiple Vulnerabilities

The remote PostgreSQL server, according to its version number, is vulnerable to multiple flaws that could allow an attacker who has the rights to query the remote database to obtain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...