Solaris 10 (x86) : 125419-01

SunOS 5.10x86: in.telnetd patch. Date this patch was last updated by Sun : Sep/18/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 125483-03

SunOS 5.10x86: cryptmod and r-commands pa. Date this patch was last updated by Sun : Sep/11/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 126254-02

SunOS 5.10x86: libssl patch. Date this patch was last updated by Sun : Sep/28/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (x86) : 126422-02

SunOS 5.10x86: format patch. Date this patch was last updated by Sun : Jan/28/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 5.10 (sparc) : 125407-01

Webservices, SunOS 5.9 5.10 5.9x86 5.10x86: patch. Date this patch was last updated by Sun : Sep/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ...

Solaris 8 (sparc) : 126131-01

SunOS 5.8: crash patch. Date this patch was last updated by Sun : Jul/23/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 125418-01

SunOS 5.10: in.telnetd patch. Date this patch was last updated by Sun : Sep/07/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

SUSE-SA:2007:047: bind, bind9

The remote host is missing the patch for the advisory SUSE-SA:2007:047 bind, bind9. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:047 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

RSA EnVision Reflected XSS Hole

Application: RSA EnVision Vendor: http://www.rsa.com Version: Version 3.3.6 Build 0115 Bug: Cross-Site Scripting Risk: Medium Date: 12 Sept 2007 Author: Stelios Tigkas e-mail: Stigkas at Gmail dot com Current Employer: Fujitsu Services List: BugTraqSecurityFocus ======= Product ======= A Security...

SQL-инъекция в ActiveKB v1.5

Здравствуйте, 3APA3A. Software: ActiveKB v1.5 Vendor: www.interspire.com Vulnerability: множественные SQL-инъекции Risk: средний Date: 27.08.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: SQL-инъекции +:| Экплойт |:...

Symantec SYMTDI.SYS Device Driver Local Elevation of Privilege

SUMMARY Some versions of Symantecs device driver SYMTDI.SYS contain a vulnerability which, if successfully exploited, could allow a local attacker to execute arbitrary code with system level privileges. Risk Impact Medium Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes...

NGS-sapigs-xssheap.txt

======= Summary ======= Name: SAP Internet Graphics Server XSS and Heap Overflow Release Date: 5 July 2007 Reference: NGS00487 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-288 Systems Affected: Risk: Medium Status: Fixed ======== TimeLine ======== Discovered: 4 January 2007...

fujitsu-primergy-disclose.txt

Advisory: Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure RedTeam Pentesting discovered an information disclosure in the Fujitsu- Siemens BX300 Switch Blade during a penetration test. By accessing URLs of the web interface directly and aborting the authentication dialog, one is...

Solaris 10 (x86) : 123779-02

SunOS 5.10x86: ata driver patch. Date this patch was last updated by Sun : Jun/28/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@Office Device

Calyptix Security Advisory CX-2007-04 Cross-Site Request Forgery Attack Against Check Point Safe@Office Device Date: 06/26/2007 http://www.calyptix.com/ http://labs.calyptix.com/CX-2007-04.php http://labs.calyptix.com/CX-2007-04.txt Overview Multiple versions of Check Point's Safe@Office UTM devi...

Calendarix version 0.7. 20070307 Multiple XSS Attacks

netVigilance Security Advisory 37 Calendarix version 0.7. 20070307 Multiple XSS Attacks Description: Calendarix is a powerful and easy to use calendar based on PHP and MySQL. It has been developed with ease of use and quick access to information in mind. It provides the user with the quickest...

utopia-xss.txt

netVigilance Security Advisory 34 Utopia News Pro version 1.4.0 XSS Attack Vulnerability Description: Utopia News Pro is a powerful and scalable news management system for any web site. News Pro, written in PHP and backed by the renowned MySQL database system, Utopia Software's News Pro is an ide...

Symantec Reporting Server Password Disclosure

SUMMARY The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Product | Affected...

Multiple Symantec Ghost Solution Suite Vulnerabilities

SUMMARY Multiple denial of service vulnerabilities have been identified in Symantec Ghost Solution Suite. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Product | Version ---|--- Symantec Ghost...

zindizayn-sql.txt

Script's Name : Zindizayn Okul Web Sistemi v1.0 tr Script's MainPage : http://www.okulwebsistemi.com Risk : Medium Found By : ShaFuck31 Thanks : | The RéD | DesquneR | SaboTaqe | ST@ReXT | BLaSTER | Vulnerable file : mezungiris.asp & ogretmenkontrol.asp Vuln :...