CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

Code injection

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

Default configuration

The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to avoid identification...

[Full-disclosure] IPSwitch WS_FTP Logging Server Remote Denial of Service -- a VDA Labs, LLC discovery

IPSwitch WSFTP Logging Server Remote Denial of Service ------------------------------------------------ Version: 7.5.29.0 Logsrv.exe Overview -------- The WS FTP logging server is a daemon that listens on UDP port 5151 and is shipped with WS FTP and by default is turned on and used by the local W...

IPSwitch WS_FTP logging daemon DoS

Denial of service UDP/515 on network packet parsing...

CVE-2007-3700

Sun Java System Access Manager formerly Java System Identity Server before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading...

CVE-2007-3569

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

CVE-2007-3569

Multiple cross-site scripting XSS vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the 1 updateform and 2 displayform parameter to a gateway/gateway.exe; the 3 TERMS, 4 database, 5 srchad, 6 SuggestedSearch, and 7 searchform...

Debian DSA-1314-1 : open-iscsi - several vulnerabilities

Several local and remote vulnerabilities have been discovered in open-iscsi, a transport-independent iSCSI implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3099 Olaf Kirch discovered that due to a programming error access to the...

[SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1314-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19th, 2007 http://www.debian.org/security/faq -...

DSA-1314-1 open-iscsi

Bulletin has no description...

Mbedthis AppWeb 2.2.2 - URL Protocol Format String

Mbedthis AppWeb 2.2.2 - URL Protocol Format String source: https://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printin...

Mbedthis AppWeb 2.2.2 - URL Protocol Format String

source: https://www.securityfocus.com/bid/24454/info Mbedthis AppWeb is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. This issue affects only applications th...

Sun Solaris管理控制台认证和日志机制远程权限提升漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris管理控制台（SMC）的日志机制和认证机制中存在安全漏洞，可能允许本地或远程非特权用户获得对Solaris系统的非授权root用户访问。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以root用户权限执行以下命令停止SMC服务器。 Solaris 8和9： /etc/init.d/init.wbem stop Solaris 10...

CVE-2007-3093

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-3093

Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...

CVE-2007-1940

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

CVE-2007-1940

IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, enabling local users to read sensitive data from ncisetup.db or msi.log. Root cause: plaintext password storage during setup/logging. Affected component: TBSM 4.1 prior to Interim Fix 1. Impact: poten...