8779 matches found
Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities
No description provided by source. bTest Your Browser/bbr br Open the link below in a new tab, then try to type data into form fields on the CitiBank website.br br a href="http://www.citibank.com/" onMouseOver="setInterval'document.myform.userinput.focus;', 10;"Open this Link in New Tab/abr br fo...
Multiple Browsers - Tabbed Browsing
Test Your Browser Open the link below in a new tab, then try to type data into form fields on the CitiBank website. Open this Link in New Tab Result: Keystrokes you pressed on the CitiBank website. /textarea // milw0rm.com 2004-10-22...
[Full-Disclosure] iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability
Macromedia JRun 4 modjrun Apache Module Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.29.04 www.idefense.com/application/poi/display?id=145&type=vulnerabilities September 29, 2004 I. BACKGROUND Macromedia JRun 4 is a full Java 2 Enterprise Edition J2EE compatible application server...
PHP-Nuke - SQL Injection EditSave Messages
PHP-Nuke - SQL Injection EditSave Messages !/usr/bin/perl use LWP; $log = "poskomenphpnukesavemsg.txt"; $Agent = "Mbahmubangga/1.0"; $proxy = "http://172.9.1.11:80/"; proxy:port ... $browser = LWP::UserAgent-new; $browser - agent$Agent; $url = 'http://www.sitewithphpnuke.com/admin.php';...
GLSA-200409-17 : SUS: Local root vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-17 SUS: Local root vulnerability Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect call to...
SUS: Local root vulnerability
Background SUS is a utility that allows regular users to be able to execute certain commands as root. Description Leon Juranic found a bug in the logging functionality of SUS that can lead to local privilege escalation. A format string vulnerability exists in the log function due to an incorrect...
[ GLSA 200409-10 ] multi-gnome-terminal: Information leak
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200409-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
multi-gnome-terminal information leak
Keystrokes are logged to user's home in debugging mode...
GLSA-200405-20 : Insecure Temporary File Creation In MySQL
The remote host is affected by the vulnerability described in GLSA-200405-20 Insecure Temporary File Creation In MySQL The MySQL bug reporting utility mysqlbug creates a temporary file to log bug reports to. A malicious local user with write access to the /tmp directory could create a symbolic li...
SSH-1 < 1.2.31 SSH Daemon Account Login Attempt Logging Failure
Binary data 1981.prm...
CVE-2004-0513
Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."...
Sun Java Calendar Logging Component Unspecified Remote DoS
Binary data 4553.prm...
advisory on rftpd
.:: Security Advisory ::. by unl0ck team http://web-hack.ru/unl0ck | | | |/ | | || |/| || | | | || | | | | | | | | Advisory: 3 by unl0ck team Bug: buffer overflow Product: rftpd current version http://rave.swehack.se Author: Werro [email protected] Realease Date : 14/08/04 Risk: Low Vendor status:...
CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point "!" for the 1 DBSNMP or 2 SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SY...
SUSE-SA:2002:039: syslog-ng
The remote host is missing the patch for the advisory SUSE-SA:2002:039 syslog-ng. The syslog-ng package is a portable syslog implementation which can be used as syslogd replacement. Syslog-ng contained buffer overflows in its macro expansion routines. These overflows could be triggered by remote...
FreeBSD : isc-dhcp3-server buffer overflow in logging mechanism (36)
The following package needs to be updated: isc-dhcp3- %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg7a9d5dfec50711d88898000d6111a684.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
RHEL 2.1 : nss_ldap (RHSA-2002:180)
Updated nssldap packages are now available for Red Hat Linux Advanced Server 2.1. These updates fix a potential buffer overflow which can occur when nssldap is set to configure itself using information stored in DNS as well as a format string bug in logging functions used in pamldap. Updated 09 J...
RHEL 2.1 : krb5 (RHSA-2003:052)
Updated kerberos packages fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped by Red Hat. An integer signedness error in the...
