CVE-2008-1401

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1400

Directory traversal vulnerability in the Net Inspector HTTP Server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot slash in the URI...

CVE-2008-1401

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1400

CVE-2008-1400 affects MG-SOFT Net Inspector 6.5.0.828 and earlier running the Net Inspector HTTP Server (mghttpd) on Windows. A directory traversal vulnerability enables remote attackers to read arbitrary files by using a ..\ or ../ in the URI. Connected documents (NVD, CVE lists) confirm the sam...

CVE-2008-1401

CVE-2008-1401 : The Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector ≤ 6.5.0.828 for Windows is affected by a format-string vulnerability in the URI that is logged, allowing an attacker to trigger arbitrary code execution. Vulnerable component: mghttpd (Net Inspector 6.5.0.828 and ear...

CVE-2008-1402

CVE-2008-1402 affects MG-SOFT Net Inspector, specifically versions up to 6.5.0.828 on Windows. The vulnerability allows remote denial of service: (1) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) and (2) via a malformed request to the Net Inspector Server (niengine). The provided conne...

Apple Safari 3.1之前版本多个安全漏洞

BUGTRAQ ID: 28290 CVECAN ID: CVE-2008-1011,CVE-2008-1010,CVE-2008-1009,CVE-2008-1008,CVE-2008-1007,CVE-2008-1006,CVE-2008-1005,CVE-2008-1004,CVE-2008-1003,CVE-2008-1002,CVE-2008-1001,CVE-2008-0050 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari的3.1版修复了多个安全漏洞，具体如下： CVE-2008-0050 恶意的HTTPS代理服务器可能在502 Bad...

CVE-2008-1401: Use of Externally-Controlled Format String

Format string vulnerability in the Net Inspector HTTP server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to execute arbitrary code via format string specifiers in the URI, which is recorded in a log file...

CVE-2008-1402: Undefined Security Weakness

MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a 1 denial of service exception and crash via a UDP packet to the SNMP Trap Service MgWTrap3.exe or 2 denial of service device freeze or memory consumption via a malformed request to the Net Inspector Server...

CVE-2008-1400: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Net Inspector HTTP Server mghttpd in MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot slash in the URI...

Cross site scripting

Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector...

CVE-2008-1004

Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector...

CVE-2008-1004

Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector...

MG-SOFT Net Inspector多个远程安全漏洞

BUGTRAQ ID: 28266 MG-SOFT Net Inspector是一个综合的网络管理系统（NMS）应用程序，能够监控并管理多协议分布式系统，如计算机网络或公共交换网络等。 Net Inspector的实现上存在多个安全漏洞，远程攻击者可能利用这些漏洞控制服务器或导致拒绝服务。 --------------------------- A mghttpd格式串漏洞 --------------------------- mghttpd是运行在5228端口上的HTTP守护程序，允许客户端下载Net Inspector...

CVE-2008-1004: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector...

CVE-2008-1004

CVE-2008-1004 is a cross-site scripting (XSS) vulnerability in WebCore used by Apple Safari prior to 3.1. The flaw, related to the Web Inspector, could allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Affected product: Apple Safari before 3.1 (WebKit/WebInspector...

MG-SOFT Net Inspector 6.5.0.828 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in...

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities

Luigi Auriemma Application: MG-SOFT Net Inspector http://www.mg-soft.com/netinsp.html bug C affects any MgWTrap3 service which is included in almost all the MG-SOFT products like MIB Browser, Query Manager, Trap Ringer Pro and so on Versions: Net Inspector From vendor's website: "MG-SOFT Net...