5455 matches found
CVE-2004-2490
CVE-2004-2490 describes a buffer overflow in IBM Informix Dynamic Server (IDS) , affecting versions 9.40.xC1 and 9.40.xC2 . The root cause is a vulnerability in the handling of a long GL_PATH environment variable, which allows local users to execute arbitrary code . The impact is local code execu...
CVE-2004-2489
CVE-2004-2489 concerns IBM Informix Dynamic Server (IDS). The described vulnerability is a format string flaw in IDS prior to 9.40.xC3 that enables local code execution when an attacker manipulates the INFORMIXDIR environment variable to point to a file containing format string specifiers in its ...
MS-RPC over CIFS Inspection Properties (CVE-2003-0533)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...
VERITAS Storage Exec DCOM servers contain multiple buffer overflows
Overview VERITAS Storage Exec contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS Storage Exec is software package that performs storage management. Multiple DCOM server components provided by Storage Exec...
CVE-2005-2695
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...
CVE-2005-2695
Technical details (affected components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates to CVE-2005-2695 in the included records (NVD/CVE/CVELIST) for new information.
CVE-2005-2695
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...
SSL Certificate Validation Vulnerability in IDS Management Software
...
Cisco Monitoring Center for Security / CiscoWorks Management Center SSL certificate spoofing
Bug in certificate validation allows to spoof IDS / IPS certificate...
Cisco Security Advisory: SSL Certificate Validation Vulnerability in IDS Management Software
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================= Cisco Security Advisory: SSL Certificate Validation Vulnerability in IDS Management Software Revision 1.0 For Public Release 2005 August 22 1700 UTC GMT...
CVE-2004-2319
IBM Informix Dynamic Server (IDS) prior to 9.40.xC3 is affected. Two issues are described: (1) local users can create or overwrite files via the /001 log file to onedcu, and (2) local users can read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Root cause details are not ...
SUSE-SA:2005:044: kernel
The remote host is missing the patch for the advisory SUSE-SA:2005:044 kernel. The Linux kernel is the core component of the Linux system. This update fixes various security as well as non-security problems discovered since the last round of kernel updates. Not all kernels are affected by all the...
SUSE-SA:2005:034: opera
The remote host is missing the patch for the advisory SUSE-SA:2005:034 opera. The web browser Opera has been updated to version 8.01 to fix various security-related bugs. Fixed XMLHttpRequest redirect vulnerability reported in Secunia Advisory 15008. Fixed cross-site scripting vulnerability...
SUSE-SA:2005:037: RealPlayer
The remote host is missing the patch for the advisory SUSE-SA:2005:037 RealPlayer. Various security problems were found in RealPlayer that allow a remote attacker to execute code in the local player by providing handcrafted files. See http://service.real.com/help/faq/security/050623player/EN/ too...
CVE-2001-1513
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...
[SA15987] MMS Ripper MMST Streams Buffer Overflow Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2002-1832
Firestorm IDS versions 0.4.0–0.4.2 have a vulnerability in the ipopts decode functionality that allows remote attackers to cause a denial of service (crash) via certain IP options. The description (CVE-2002-1832) is reflected across NVD/CVE records; no remediation details are provided in the conn...