[SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2008-2938: Apache Tomcat information disclosure vulnerability - Updated Severity: Important was moderate Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.37 Tomcat 5.5.0 to 5.5.26 Tomcat 6.0.0 to 6.0.16 The unsupported...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 29edd807-438d-11d9-8bb9-00065be4b5b6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: socat

The remote host is missing an update to the system as announced in the referenced advisory. VID f3017ce1-32a4-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: imlib

The remote host is missing an update to the system as announced in the referenced advisory. VID 2001103a-6bbd-11d9-851d-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. VID cca97f5f-7435-11db-91de-0008743bf21a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID a81746a1-c2c7-11d9-89f7-02061b08fc24 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Storm library vulnerability principle and the law-vulnerability and early warning-the black bar safety net

SQL injectionpopular for a long time, we're looking for vulnerability injection purpose is nothing but want to get the database stuff, such as username, password, etc., further the MSSQL database you can also take this to get permission. The Access-based Foundation to say, if we don't have the...

Unfixed XSS vulnerability at www.knightfoundation.org

Security researcher FasTWORM, has submitted on 30/08/2008 a cross-site-scripting XSS vulnerability affecting www.knightfoundation.org, which at the time of submission ranked 355224 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It ...

Microsoft Office Version Detection

Detects the installed version of Microsoft Office. The script logs in via smb, searches for Microsoft Office in the registry, gets version from the Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Symantec Veritas Storage Foundation Scheduler服务绕过认证漏洞

BUGTRAQ ID: 30596 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation提供了Windows Scheduler服务（VxSchedService.exe）默认在TCP 4888端口上监听来自客户端系统的入站调度信息。由于管理控制台允许NULL NTLMSSP认证，因此网络攻击者可以绕过内嵌的认证直接连接到Scheduler服务套接字，以SYSTEM用户的权限执行任意代码。 Symantec Veritas Storage Foundation for Windows 5.1...

Security Update for Outlook Express (951066)

This host is missing a critical security update according to Microsoft Bulletin MS08-048. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Authentication flaw

The management console in the Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation for Windows SFW 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that...

CVE-2008-3703

The CVE-2008-3703 issue affects Symantec Veritas Storage Foundation for Windows (SFW) where the Volume Manager Scheduler Service (VxSchedService.exe) allows NULL NTLMSSP authentication, enabling remote attackers to manipulate snapshot schedules through the service socket and potentially execute a...

CVE-2008-3703

The management console in the Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation for Windows SFW 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that...

Symantec VERITAS Storage Foundation multiple security vulnerabilities

DoS on TCP/4888 request parsing, buffer overflow on UDP/3207 parsing...

SYM08-015_SFW_SecurityUpdateBypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Symantec Security Advisory SYM08-015 14 Aug, 2008 Veritas Storage Foundation for Windows Volume Manager Scheduler Service for Windows Security Update Circumvention Revision History None Severity Medium Remote Access Yes, network access required Loca...

ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability

ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-053 August 14, 2008 -- Affected Vendors: Symantec -- Affected Products: Symantec Veritas Storage Foundation -- Vulnerability Detail...

VERITAS Storage Foundation NULL NTLMSSP Authentication Bypass (SYM08-015)

The version of the Scheduler Service component installed as part of Veritas Storage Foundation for Windows on the remote host allows NULL NTLMSSP authentication. If requests can be sent to the TCP service listening on port 4888, a remote attacker can leverage this issue to add, modify, or delete...

Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability

This vulnerability allows an attacker to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability. The specific flaw exists in the...

Apache Tomcat UTF-8目录遍历漏洞

BUGTRAQ ID:30633 CVE ID：CVE-2008-2938 CNCVE ID：CNCVE-20082938 Apache Tomcat是一款流行的开放源码的JSP应用服务器程序。。 Apache Tomcat不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB服务程序上下文查看任意本地文件。 此漏洞发生是由于JAVA处理输入存在问题，如果context.xml或server.xml允许'allowLinking'和'URIencoding'为'UTF-8'，攻击者可以以WEB权限获得重要的系统文件内容。 Apache Software Foundation Tomca...