MS04-011: Microsoft Hotfix (credentialed check) (835732)

The remote host is missing a critical Microsoft Windows Security Update 835732. This update fixes various flaws that could allow an attacker to execute arbitrary code on the remote host. A series of worms Sasser are known to exploit this vulnerability in the wild. C Tenable Network Security, Inc...

MS04-012: Microsoft Hotfix (credentialed check) (828741)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker could exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12206; scriptversion"1.45"; scriptcvsdate"Date:...

F-Secure Anti-Virus for Linux fails to properly detect Sober.D virus

Overview F-Secure Anti-Virus for Linux contains a flaw that may prevent it from properly detecting the Sober.D virus. A hotfix for this vulnerability has been released. Description F-Secure Anti-Virus version 4.52 for Linux contains a flaw that may prevent it from properly detecting the Sober.D...

MS04-001: Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A buffer overflow vulnerability in the H.323 filter of the Microsoft ISA Server 2000 allows an attacker to execute arbitrary code on the remote host. An attacker can exploit this vulnerability by sending a specially crafted packet to the remote ISA Server. C Tenable Network Security, Inc...

MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

The remote host contains a version of the HTML Converter module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...

MS03-029: Flaw in Windows Function may allow DoS (823803)

The remote host is running a version of Windows NT 4.0 that has a flaw in one of its functions that could allow a user to cause a denial of service on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11802; scriptversion"1.34"; scriptcvsdate"Date: 2018/11/15...

MS03-024: SMB Request Handler Buffer Overflow (817606)

The remote host is affected by a vulnerability in its SMB stack that could allow an authenticated attacker to corrupt the memory of this host. This may result in execution of arbitrary code on this host, or an attacker may disable this host remotely. C Tenable Network Security, Inc...

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow source: https://www.securityfocus.com/bid/7506/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From'...

MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...

Watchguard firewall appliances security issues

Scope: WatchGuard Firewall Appliances. Vendor: WatchGuard Technologies, Inc http://www.watchguard.com . Affected: Vclass appliances running the current version of Vclass software. Legacy RSSA appliances running Vclass software. Legacy RSSA appliances that have not yet upgraded to Vclass software...

[security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN SSRT2362 WEBES Service Tools HP Tru64 UNIX, HP OpenVMS, Windows Potential File Access Vulnerability REVISION: 0 ------------------------------------------------------------ NOTICE: There are no restrictions for distribution of this...

KPMG-2002015: Microsoft Distributed Transaction Coordinator DoS

-------------------------------------------------------------------- Title: Microsoft Distributed Transaction Coordinator DoS BUG-ID: 2002015 Released: 19th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the way MSDTC handles malformed...

MS01-048: RPC Endpoint Mapper Malformed Request DoS (305399)

The hotfix for the 'RPC Endpoint Mapper Service on NT 4 has not been applied' problem has not been applied. Because the endpoint mapper runs within the RPC service itself, exploiting this vulnerability would cause the RPC service to fail, with the attendant loss of any RPC-based services the serv...

ISSalert: ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

MDKSA-2001:080 - Zope update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: Zope Date: October 15th, 2001 Advisory ID: MDKSA-2001:080 Affected versions: 7.1, 7.2, Corporate Server 1.0.1 Problem Description: A new Zope hotfix is available that fixes a problem with DTML...

Moderate: Red Hat Security Advisory: : New Zope packages are available

New Zope packages are available which fix a security flaw with DTML scripting. The updated packages include a "hotfix" product which addresses a security problem with DTML scripting, as described in the Hotfix2001-09-28 README.txt file: "The issue involves the fmt attribute of dtml-var tags...

MS01-046: IrDA Driver Malformed Packet Remote DoS (252795)

The hotfix for the 'IrDA access violation patch' problem has not been applied. This vulnerability can allow an attacker who is physically near the W2K host to shut it down using a remote control. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10734;...

MS01-008: NTLMSSP Local Privilege Escalation (280119)

The hotfix for the 'NTLMSSP Privilege Escalation' problem has not been applied. This hotfix corrects a problem in Windows NT that could allow a local process to execute code with the privileges of the NTLMSSP service provider. This vulnerability allows a malicious user, who has the right to log o...

[SECURITY] [DSA-055-1] zope remote unauthorized access

Package : zope Problem type : remote unauthorized access Debian-specific: no A new Zope hotfix has been released which fixes a problem in ZClasses. The README for the 2001-05-01 hotfix describes the problem as any user can visit a ZClass declaration and change the ZClass permission mappings for...

[SECURITY] [DSA 043-2] New versions of Zope fix vulnerabilities

---------------------------------------------------------------------------- Debian Security Advisory DSA-043-2 [email protected] http://www.debian.org/security/ Martin Schulze April 26, 2001 - ---------------------------------------------------------------------------- Packages : zope...