CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

CentOS 4 : gtk2 (CESA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

Network Interfaces Enumeration (WMI)

Binary data wmilistinterfaces.nbin...

RHEL 4 : gtk2 (RHSA-2007:0019)

Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. A bug...

Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability

Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT12-09-2006 ============================================================ Adobe/Macromedia Flash Player - Remote Code Execution ============================================================ Advisory Date...

Cisco CallManager Administration and User Options Web Interfaces Cross-Site Scripting Vulnerability

Cisco CallManager versions prior to 4.31, 4.23, 4.13SR4 and 3.35SR3 contain a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary script in the user's browser session. The vulnerability exists due to improper input sanitization in the CallManager Administration...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...

CVE-2006-1880

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...

Oracle Diagnostics Interfaces vulnerability

Overview An unspecified vulnerability in Oracle Diagnostics Interfaces may allow a remote, unauthenticated attacker to compromise system confidentiality and integrity. Description Oracle Diagnostics Interfaces contains a vulnerability. The details of this vulnerability are not clear. However,...

CVE-2006-1880: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...

RHEL 3 : initscripts (RHSA-2006:0015)

Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system,...

Moderate: Red Hat Security Advisory: initscripts security update

Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system,...

RHEL 4 : initscripts (RHSA-2006:0016)

An updated initscripts package that fixes a privilege escalation issue and several bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The initscripts package contains the basic system scripts used to boot your Red Hat system...

CVE-2006-0299

The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin...

DSA-785-1 libpam-ldap - authentication bypass

Bulletin has no description...

CVE-2005-2374: Undefined Security Weakness

Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the 1 Telnet or 2 web administration interfaces...

enterasys.txt

Problem Description An undocumented account with a default password exists, additionally guest users can DoS the switch. 2. Tested systems The following versions were tested and found vulnerable: Vertical Horizon VH-2402S with firmware 02.05.00 Vertical Horizon VH-2402S with firmware 02.05.09.07...

[Full-disclosure] Undocumented account vulnerability in Enterasys Vertical Horizon switches

Problem Description An undocumented account with a default password exists, additionally guest users can DoS the switch. 2. Tested systems The following versions were tested and found vulnerable: Vertical Horizon VH-2402S with firmware 02.05.00 Vertical Horizon VH-2402S with firmware 02.05.09.07...

Altiris Client 6.0.88 - Service Privilege Escalation

Altiris Client 6.0.88 - Service Privilege Escalation // source: https://www.securityfocus.com/bid/13409/info A local privilege escalation vulnerability affects the Altiris Client Service. This issue is due to a failure of the application to properly secure access to privileged interfaces. An...

Kernel memory disclosure in ifconf()

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:04.ifconf Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in ifconf Category: core Module: sysnet Announced: 2005-04-15 Credits: Ilja van...