[SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 421-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 12th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 414-1] New jabber packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 414-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

CVE-2003-0999

Unknown multiple vulnerabilities in 1 lpstat and 2 the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files...

CVE-2003-0984

Real time clock RTC routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space...

CVE-2003-1414

Directory traversal vulnerability in parsexml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... triple dot in the filename parameter...

CVE-2003-1500

PHP remote file inclusion vulnerability in functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter...

phpBB 2.0.6 - search_id SQL Injection MD5 Hash

phpBB 2.0.6 - searchid SQL Injection MD5 Hash !/usr/bin/perl -w use IO::Socket; PROOF-OF-CONCEPT work only with mysql ver 4.0 work only with post 1 Example: C:\r57phpbb-poc.pl 127.0.0.1 phpBB2 2 2 prepare to connect... + connected prepare to send data... + OK wait for response... + MD5 Hash for...

DNS Server Fingerprinting

This script attempts to identify the remote DNS server type and version by sending various invalid requests to the remote DNS server and analyzing the error codes returned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script is a very crude attempt at doing DNS fingerprinting...

CVE-2003-0856

iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface...

CVE-2003-0970

The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service packet loss via ARP packets, which cause all ports to become temporarily disabled...

OS Identification : ICMP

This plugin attempts to identify the Operating System type and version by sending more or less incorrect ICMP requests using the techniques outlined in Ofir Arkin's paper 'ICMP Usage In Scanning'. An attacker may use this to identify the kind of the remote operating system and gain further...

OS Identification

Using a combination of remote probes e.g., TCP/IP, SMB, HTTP, NTP, SNMP, etc., it is possible to guess the name of the remote operating system in use. It is also possible sometimes to guess the version of the operating system. %NASLMINLEVEL 70300 C Tenable, Inc. @@NOTE: The output of this plugin...

CVE-2003-0886

Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code...

HMAP Web Server Fingerprinting

Nessus was able to identify the remote web server type by sending several valid and invalid HTTP requests. In some cases, its version can also be approximated, as well as some options. C Tenable Network Security, Inc. Redistribution and use in source, with or without modification, are permitted...

CVE-2003-0855

Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...

CVE-2003-0792

Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service crash via a certain email...

CVE-2003-0707

Buffer overflow in LinuxNode node before 0.3.2 allows remote attackers to execute arbitrary code...

CVE-2003-0681

...

CVE-2003-0762

Buffer overflow in 1 foxweb.dll and 2 foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL PATHINFO value...

CVE-2003-0546

up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised...