Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability (956841)

This host is missing important security update according to Microsoft Bulletin MS08-064. OpenVAS Vulnerability Test $Id: secpodms08-064900225.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability 956841 Authors: Veerendr...

MS08-065: Microsoft Windows Message Queuing Service RPC Request Handling Remote Code Execution (951071) (uncredentialed check)

The remote version of Windows is affected by a vulnerability in its Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34413;...

TWiki command execution vulnerability

Overview The TWiki wiki software fails to validate input passed to certain URLs. By accessing a URL containing the TWiki configuration script, an attacker may be able to read arbitrary files. Description TWiki is a wiki that is runs in the context of the Apache web server. TWiki is installed by...

Microworld Mailscan 5.6.a Password Reveal Exploit

No description provided by source. / ---------------------------------------------------------------------------------------------- / / / \ \ / / / / / / \ | / / / / / // // / / |/ / //////|/ 2008 SecurityDevelopment.net Author: SlaYeR Date: 25. Aug. 2008 Email: [email protected]...

Microworld Mailscan 5.6.a - Password Reveal

Microworld Mailscan 5.6.a - Password Reveal / ---------------------------------------------------------------------------------------------- / / / \ \ / / / / / / \ | / / / / / // // / / |/ / //////|/ 2008 SecurityDevelopment.net Author: SlaYeR Date: 25. Aug. 2008 Email:...

Microworld Mailscan 5.6.a - Password Reveal

/ ---------------------------------------------------------------------------------------------- / / / \ \ / / / / / / \ | / / / / / // // / / |/ / //////|/ 2008 SecurityDevelopment.net Author: SlaYeR Date: 25. Aug. 2008 Email: [email protected] Website:...

FreeBSD Ports: zope

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities 1 in the WYSIWYG editors, 2 during local group creation, 3 during HTML redirects, 4 in the HTML import, 5 in the Rich text editor, and 6 in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inje...

Vulnerabilities in DNS Could Allow Spoofing (953230)

This host is missing critical security update according to Microsoft Bulletin MS08-037. OpenVAS Vulnerability Test $Id: secpodms08-037900005.nasl 6382 2017-06-20 15:08:09Z cfischer $ Description: Vulnerabilities in DNS Could Allow Spoofing 953230 Authors: Chandan S Copyright: Copyright C 2008...

Microsoft PowerPoint Could Allow Remote Code Execution Vulnerabilities (949785)

This host is missing critical security update according to Microsoft Bulletin MS08-051. OpenVAS Vulnerability Test $Id: secpodms08-051900033.nasl 6538 2017-07-05 11:38:27Z cfischer $ Description: Microsoft PowerPoint Could Allow Remote Code Execution Vulnerabilities 949785 Authors: Chandan S...

phpizabi-traverse.txt

PHPizabi v0.848b traversal file access Vendor url:http://www.phpizabi.net/ Advisore:http://lostmon.blogspot.com/2008/08/ phpizabi-v0848b-traversal-file-access.html Vendor notify:no exploit available:yes Description By vendor page: PHPizabi is one of the most powerful social networking platforms o...

MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...

Endless loop and resources consumption in Halo 1.0.7.0615

Luigi Auriemma Application: Halo: Combat Evolved http://www.microsoft.com/games/pc/halo.aspx Versions: = 1.0.7.0615 before 30 Jul 2008 Platforms: Windows Bugs: A endless loop B resources consumption Exploitation: remote, versus server Date: 06 Aug 2008 Author: Luigi Auriemma e-mail:...

Citrix MetaFrame Privilege Escalation

INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ http://www.security.org.br/ ADVISORY/1907 - Citrix MetaFrame Privilege Escalation PRIORITY: Low I - INTRUDERS: ---------------- Intruders Tiger Team Security http://www.intruders.com.br/ is a SecurityLabs...

MS02-014:Windows Shell 未检查缓冲器 - NT4

CVE ID: CVE-2002-0070 Windows Shell 负责提供 Windows 使用者介面的基本架构, 例如 Windows 桌面, 也提供其他重要的功能辅助定义及掌握使用者的电脑使用情形, 包括使用的档案及目录, 提供开启档案该使用哪个应用程式等. Windows Shell 在一个帮助寻找系统上未被完全移除的应用程式功能存在未充分检查缓冲区的瑕疵, 这一个未经检查的缓冲区可以被攻击者用来进行缓冲区越位Buffer Overrun攻击, 原则上这个漏洞不能经由远端攻击, 但可以被网页及 HTML 格式的电子邮件攻击. 如果使用者安装应用程式後移除一些含有自订 URL...

SOL8939 - SNMPv3 HMAC verification vulnerability CVE-2008-0960 - VU#878044

Information about this advisory is available at the following locations: F5 Product Development tracked this issue as CR99838 for BIG-IP LTM, GTM, ASM, PSM, Link Controller, and WebAccelerator and it was fixed in BIG-IP 9.4.6 and 10.0.0. For information about upgrading, refer to the BIG-IP LTM,...

SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

This security advisory describes a BIND 8 and BIND 9 vulnerability which allows remote attackers to spoof DNS traffic using cache poisoning techniques against recursive resolvers. With the exception of FirePass, the F5 products listed as affected in this security advisory run a version of BIND th...

F5 FirePass 1200 SNMP daemon DoS

F5 FirePass 1200 SNMP daemon DoS Product: F5 FirePass 1200 http://www.f5.com/products/firepass/ The F5 FirePass 1200 SSL VPN appliance contains a denial-of-service vulnerability in the SNMP daemon. Traversing walking OID branch hrSWInstalled in HOST-RESOURCES-MIB OID 1.3.6.1.2.1.25.6 will cause t...

Securify bulletin: Microsoft Active Directory Denial-of-service

SECURIFY Bulletin: Active Directory Denial-of-service ===================================================== I. SUMMARY: SECURIFY has discovered a denial-of-service vulnerability in Microsoft Active Directory AD in which a domain user sending a specially-crafted LDAP request causes the Active...

f5firepass-xss.txt

F5 FirePass Content Inspection Management XSS Product: F5 FirePass http://www.f5.com/products/firepass/ The F5 FirePass SSL VPN appliance provides rudimentary web request sanitization for resources exposed through the appliance via Portal Access. This Content Inspection feature can be configured...