Cisco Secure Access Control Server vulnerable to a stack-based buffer overflow via a specially crafted "HTTP GET" request

Overview A vulnerability in the web administrative server supplied with Cisco Secure ACS products could allow a remote attacker to execute arbitrary code on an affected system. Description Cisco Secure ACS is a Remote Access Dial-In User Service RADIUS and Terminal Access Controller Access Contro...

CVE-2006-6855

AIDeX Mini-WebServer 1.1 early release 3 is affected by a remote denial-of-service vulnerability: a flood of HTTP GET requests can crash the daemon, possibly tied to the GUI’s HTTP log data display. Root cause details are not provided, and no patch/mitigation is specified in the available documen...

EUVD-2006-6838

AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service daemon crash via a flood of HTTP GET requests, possibly related to display of HTTP log data by the GUI. NOTE: some of these details are obtained from third party information...

CVE-2006-6855

AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service daemon crash via a flood of HTTP GET requests, possibly related to display of HTTP log data by the GUI. NOTE: some of these details are obtained from third party information...

kronolith -- arbitrary local file inclusion vulnerability

iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...

ELOG Web Logbook Remote Denial of Service Vulnerability

ELOG Web Logbook Remote Denial of Service Vulnerability OS2A ID: OS2A1008 Status: 10/31/2006 Issue Discovered 11/08/2006 Reported to the Vendor 11/08/2006 Fixed by Vendor 11/10/2006 Advisory Released Class: Denial of Service Severity: Medium Overview: --------- The Electronic Logbook ELOG is part...

Solaris 7 (i386) : 110538-01

The remote host is missing Sun Security Patch number 110538-01 AnswerBook 1.4.3x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:36:40 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 7 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.6 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 8 (sparc) : 110532-01

The remote host is missing Sun Security Patch number 110532-01 AnswerBook 1.4.3: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:09 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 7 (sparc) : 110531-01

The remote host is missing Sun Security Patch number 110531-01 AnswerBook 1.4.2: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:24:08 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 2.5.1 (sparc) : 110532-01

The remote host is missing Sun Security Patch number 110532-01 AnswerBook 1.4.3: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:09 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 8 (i386) : 110538-01

The remote host is missing Sun Security Patch number 110538-01 AnswerBook 1.4.3x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:36:40 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 8 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 7 (sparc) : 110532-01

The remote host is missing Sun Security Patch number 110532-01 AnswerBook 1.4.3: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:09 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 2.6 (i386) : 110538-01

The remote host is missing Sun Security Patch number 110538-01 AnswerBook 1.4.3x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:36:40 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.6 (sparc) : 110531-01

The remote host is missing Sun Security Patch number 110531-01 AnswerBook 1.4.2: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:24:08 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

CVE-2006-5715

CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...

CVE-2006-5596

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ dot dot backslash sequences in an HTTP GET request...

CVE-2006-5112

CVE-2006-5112 reflects a buffer overflow in the NaviCOPA Web Server 2.01 caused by handling of long HTTP GET requests, enabling remote code execution. Connected sources confirm a public proof-of-concept/exploit vector: a Metasploit module named navicopa_get_overflow (and related exploit reference...