OCS Inventory NG 1.02 - Multiple SQL Injections

OCS Inventory NG 1.02 - Multiple SQL Injections OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability ha...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

DEBIAN-CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

Open redirect

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

CVE-2009-1769 affects OCS Inventory NG (notably around 1.01-era interfaces) where the web UI may disclose valid usernames via differing error messages. OpenVAS/Nessus records tie this to Fedora advisories FEDORA-2009-5764/5769/5773 for ocsinventory, noting additional mentions of SQL injection and...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

DEBIAN-CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

OCS Inventory NG is affected in versions before 1.02, with multiple unspecified vulnerabilities in the Server component. The available sources note unknown impact and attack vectors, and there are no explicit root-cause or patch details in the provided connected documents. No exploitation informa...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

[SECURITY] Fedora 10 Update: glpi-0.71.5-1.fc10

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 9 Update: glpi-0.71.5-1.fc9

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Polycom Videoconferencing Unit Detection

The remote web server provides an access to a Polycom videoconferencing unit. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34851; scriptversion"1.11"; scriptnameenglish: "Polycom Videoconferencing Unit Detection"; scriptsetattributeattribute:"synopsis", value: "The...