HP Integrated Lights Out unauthorized access

Unauthorized access if SSH with key based authentication is used...

Sony Media Integrated Server多个远程安全漏洞

VAIO Media Integrated Server软件用于在SONY笔记本电脑中实现娱乐功能。 Sony VAIO Media Integrated Server中存在缓冲区溢出漏洞，允许攻击者以系统权限执行任意代码。此外，攻击者还可以利用目录遍历漏洞读取系统中任意文件的内容。 Sony VAIO Media Integrated Server 5.x Sony VAIO Media Integrated Server 4.x Sony VAIO Media Integrated Server 3.x Sony VAIO Media Integrated Server 2.x...

Debian DSA-999-1 : lurker - several vulnerabilities

Several security related problems have been discovered in lurker, an archive tool for mailing lists with integrated search engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1062 Lurker's mechanism for specifying configuration files was...

AIX 5.1 : IY26302

The remote host is missing AIX Critical Security Patch number IY26302 SECURITY: integrated login issue. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2006-4733

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...

Multiple Sony Vaio Media Integrated Server security vulnerabilities

Buffer overflow, durectory traversal...

CA Integrated Threat Management, eTrust Antivirus, eTrust PestPatrol format string vulnerability

Format string bug in job description field...

[Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust

=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...

CVE-2006-3223

Format string vulnerability in CA Integrated Threat Management ITM, eTrust Antivirus eAV, and eTrust PestPatrol ePP r8 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a scan job with format strings in the description field...

CVE-2006-3223

The CVE-2006-3223 issue affects CA ITM, eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) version 8.0. It is a format string vulnerability in the scan job description field that can crash the process and potentially execute arbitrary code. The vulnerability arises from improper handling of form...

HP Integrated Lights-Out (iLO) Detection (HTTP)

HTTP based detection of HP Integrated Lights-Out iLO devices. SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Plexcor's(r) CMS XSS vuln.

Plexcor's® CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcors-cms-xss-vuln.html vendor:http://www.plexcor.com/ affected version: 4.0 and prior Product Description: Integrated modular content, communications, calendar, commerce,...

HP Integrated Lights-Out (iLO) Detection

The remote host is an HP Integrated Lights-Out iLO server. These servers are embedded systems integrated into HP ProLiant servers for the purpose of out-of-band management. TRUSTED...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Summary : CVE-2005-3068 affects the Eric IDE (eric3). Debian security advisory DSA-869-1 states the vulnerability is caused by missing input sanitising in eric, which could lead to arbitrary code execution. Affected releases: eric before 3.7.2; the fix is in eric 3.7.2-1 (and 3.6.2-2 for the rele...

CVE-2005-2552

Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out ILO firmware before 1.81 allows attackers to access server controls when the server is "powered down."...

CVE-2005-2552

CVE-2005-2552 concerns HP ProLiant DL585 servers with Integrated Lights Out (ILO) firmware prior to 1.81. The issue is described as an unknown vulnerability that allows an attacker to access server controls when the server is powered down. Public details indicate a CVSS v2 base score of 7.5 (HIGH...

CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2002-1946

The CVE-2002-1946 entry applies to Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. The issue is that when the Save Password option is used, the password is stored in the registry using a weak, one-to-one encryption scheme, allowing local users to obtain and decrypt...