8849 matches found
Debian Security Advisory DSA 055-1 (gftp)
The remote host is missing an update to gftp announced via advisory DSA 055-1. OpenVAS Vulnerability Test $Id: deb0551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 055-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 930-2 (smstools)
The remote host is missing an update to smstools announced via advisory DSA 930-2. Ulf Harnhammar from the Debian Security Audit project discovered a format string attack in the logging code of smstools, which may be exploited to execute arbitrary code with root privileges. The original advisory...
Debian Security Advisory DSA 1276-1 (krb5)
The remote host is missing an update to krb5 announced via advisory DSA 1276-1. Several remote vulnerabilities have been discovered in the MIT reference implementation of the Kerberos network authentication protocol suite, which may lead to the execution of arbitrary code. The Common...
Debian Security Advisory DSA 048-1 (cfingerd)
The remote host is missing an update to cfingerd announced via advisory DSA 048-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 960-3 (libmail-audit-perl)
The remote host is missing an update to libmail-audit-perl announced via advisory DSA 960-3. The former update caused temporary files to be created in the current working directory due to a wrong function argument. This update will create temporary files in the users home directory if HOME is set...
Debian Security Advisory DSA 787-1 (backup manager)
The remote host is missing an update to backup manager announced via advisory DSA 787-1. Two bugs have been found in backup-manager, a command-line driven backup utility. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1855 Jeroen Vermeulen discovered...
Debian Security Advisory DSA 960-1 (libmail-audit-perl)
The remote host is missing an update to libmail-audit-perl announced via advisory DSA 960-1. Niko Tyni discovered that the Mail::Audit module, a Perl library for creating simple mail filters, logs to a temporary file with a predictable filename in an insecure fashion when logging is turned on,...
Debian Security Advisory DSA 055-1 (gftp)
The remote host is missing an update to gftp announced via advisory DSA 055-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...
Dovecot password caching vulnerability
Under some conditions user can be logged with different account with same password...
Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
Luigi Auriemma Application: Georgia SoftWorks SSH2 Server GSWSSHD http://www.georgiasoftworks.com/prodssh2/ssh2server.htm Versions: = 7.01.0003 Platforms: Windows Bugs: A format string in the log function B buffer-overflow in the log function C buffer-overflow in the handling of the password...
DSA-1447-1 tomcat5.5 several vulnerabilities
Bulletin has no description...
CVE-2007-5342
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
Design/Logic Flaw
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
CVE-2007-5342
CVE-2007-5342 affects Apache Tomcat versions 5.5.9–5.5.25 and 6.0.0–6.0.15 where the default catalina.policy for the JULI logging component fails to restrict permissions for web applications. The underlying issue is that untrusted web apps can modify logging configuration options and overwrite a...
CVE-2007-5342
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
PT-2007-6410 · Apache +1 · Apache Tomcat +1
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.9 through 5.5.25 Apache Tomcat versions 6.0.0 through 6.0.15 Description: The default catalina.policy in the JULI logging component does not restrict certain permissions for web applications, allowing attackers to...
[CVE-2007-5342] Apache Tomcat's default security policy is too open
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-5342: Tomcat's default security policy is too open Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.9 to 5.5.25 Tomcat 6.0.0 to 6.0.15 Description: The JULI logging component allows web applications to provid...
Apache Tomcat weak default permissions
JULI logging component allow arbitrary files overwriting...
Sql injection
SQL injection vulnerability in the Call Detail Record Postgres logging engine cdrpgsql in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via 1 ANI and 2 DNIS arguments...