743 matches found
audit logging of failed logins
Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...
audit logging of failed logins
Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party informatio...
Oracle audit issue with XMLDB ftp service
NGSSoftware Insight Security Research Advisory Name: Oracle audit issue with XMLDB ftp service Systems Affected: Oracle Oracle 9ir2, 10g Release 1 Severity: High Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Reported: 9th March 2006 Date of Public Advisory: 17...
DenyHosts: Denial of service
Background DenyHosts is designed to monitor SSH servers for repeated failed login attempts. Description Daniel B. Cid discovered that DenyHosts used an incomplete regular expression to parse failed login attempts, a different issue than GLSA 200701-01. Impact A remote unauthenticated attacker can...
CVE-2004-2696
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation RMI over Internet Inter-ORB Protocol IIOP, does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in a...
HP-UX PHCO_36809 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)
s700800 11.11 logins1M cumulative patch : A potential security vulnerability has been identified in HP-UX running the logins1M command. This command incorrectly reports password status. As a result password issues may not be detected, allowing remote unauthorized access. %NASLMINLEVEL 70300 C...
HP-UX PHCO_36808 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)
s700800 11.23 logins1M cumulative patch : A potential security vulnerability has been identified in HP-UX running the logins1M command. This command incorrectly reports password status. As a result password issues may not be detected, allowing remote unauthorized access. %NASLMINLEVEL 70300 C...
HP-UX PHCO_36003 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)
s700800 11.31 logins1M cumulative patch : A potential security vulnerability has been identified in HP-UX running the logins1M command. This command incorrectly reports password status. As a result password issues may not be detected, allowing remote unauthorized access. %NASLMINLEVEL 70300 C...
Debian DSA-1376-1 : kdebase - programming error
iKees Huijgen discovered that under certain circumstances KDM, an X session manager for KDE, could be tricked into allowing user logins without a password. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...
DSA-1376-1 kdebase - programming error
Bulletin has no description...
Design/Logic Flaw
The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected...
CVE-2007-5008
The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected...
CVE-2007-5008
The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected...
CVE-2007-5008
HP-UX vulnerability CVE-2007-5008 affects logins(1M) on HP-UX B.11.31, B.11.23, and B.11.11 where the command incorrectly reports password status, allowing remote attackers to obtain privileges when certain password issues are not detected. Impact is remote unauthorized access / potential privile...
BugMall Shopping Cart 2.5 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. --==+================================================================================+==-- --==+ BUG MALL SHOPPING CART 2.5 AND PRIOR SQL, XSS, DEFAULT LOGINS VULNERABILITYS +==--...
bugmall-xss.txt
--==+================================================================================+==-- --==+ BUG MALL SHOPPING CART 2.5 AND PRIOR SQL, XSS, DEFAULT LOGINS VULNERABILITYS +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
BugMall Shopping Cart 2.5 (SQL/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== BugMall Shopping Cart 2.5 SQL/XSS Multiple Remote Vulnerabilities ===================================================================...
Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection
Title : Gazi Okul Sitesi 2007trfotokategori.asp Remote SQL Injection Vulnerability Author : CoNqUeRoR Demo Page : http://www.gazilogo.com Script Page : http://www.aspindir.com/indir.asp?id=4746 Date : 30-03-2007 Vulnerability: -------------------- Username & Password :...
gazi-sql.txt
Title : Gazi Okul Sitesi 2007trfotokategori.asp Remote SQL Injection Vulnerability Author : CoNqUeRoR Demo Page : http://www.gazilogo.com Script Page : http://www.aspindir.com/indir.asp?id=4746 Date : 30-03-2007 Vulnerability: -------------------- Username & Password :...
[SECURITY] [DSA 1276-1] New krb5 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1276-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 3th, 2007 http://www.debian.org/security/faq -...