377 matches found
libpng contains integer overflows in progressive display image reading
Overview The Portable Network Graphics library libpng contains several flaws in progressive image handling that could introduce a remotely exploitable vulnerability. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics...
[security bulletin] SSRT4773 HP-UX xfs and stmkfont remote unauthorized access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01061 REVISION: 0 TITLE: SSRT4773 rev.0 HP-UX xfs and stmkfont remote unauthorized access NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...
Cross Site Scripting in VBulletin forum software
Client side execution of malicious scripts cross-site scripting Test Impact Customer session and cookies may be compromised. The attacker may be able to pose as a legitimate user to view and alter user records, and perform transactions as that user. From the polarised perspective, a user may only...
phpMyAdmin255pl1.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior Summary : phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the WWW. There is a vulnerability in the current stable version of phpMyAdmin...
KLA10355 LPE vulnerability in Symantec
An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can gain system privileges. This vulnerability can be exploited locally via an unknown vector. Original advisories Symantec advisory Exploitation Related products...
Cisco Security Advisory: HTTP GET Vulnerability in AP1x00
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: HTTP GET Vulnerability in AP1x00 Revision 1.0 For Public Release 2003 July 28 16:00 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software...
netkill - generic remote DoS attack
NAME netkill - generic remote DoS attack $Id: netkill,v 1.7 2000/04/20 18:56:22 shalunov Exp $ SUMMARY By exploiting features inherent to TCP protocol remote attackers can perform denial of service attacks on a wide array of target operating systems. The attack is most efficient against HTTP...
URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Secure Shell Community, A potential remote root exploit has been discovered in SSH Secure Shell 3.0.0, for Unix only, concerning accounts with password fields consisting of two or fewer characters. Unauthorized users could potentially log in to...
Cisco IOS creates SNMP read-only community string
Overview There is a vulnerability that permits unauthorized access to several switch and router products manufactured by Cisco Systems. An attacker who gains access to an affected device can read its configuration, creating an information leak. Description Certain versions of the Cisco...
vpn-root.txt
Date: 8-14-00 Time: 12:40p PST / You have been infected by the Bubonic Loki / OVERVIEW --------- RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to ...
Security Announcement: tnef
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: tnef 0-124 Date: Mon Jul 10 19:19:16 CEST 2000 Affected SuSE versions: 6.3-6.4 Vulnerability Type: remote compromise SuSE default package: no Other affected systems: all unix systems using this package A security hole was...
Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC
-----BEGIN PGP SIGNED MESSAGE----- MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC 2000-06-09 SUMMARY: A buffer overrun capable of creating a denial of service exists in implementations of Kerberos 4 KDC programs. This is IN ADDITION to the krbrdreq vulnerability that was previously...
DUO-PSA-2015-003: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2015-003 Original Publication Date: 2015-08-06 Revision Date: 2015-08-10 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue which, under certain configurations, could have enabled attackers to bypass...
