Design/Logic Flaw

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database...

Design/Logic Flaw

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to upload arbitrary files via unknown vectors...

CVE-2008-7130

The connected sources indicate that CVE-2008-7130 relates to IBM DB2 Monitoring Console with multiple unspecified security bypass vulnerabilities in versions earlier than 2.2.25. OpenVAS entries title this as “DB2 Monitoring Console < 2.2.25 Multiple Unspecified Security Bypass Vulnerabilities...

CVE-2008-7131

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database...

CVE-2008-7131

CVE-2008-7131 affects the IBM DB2 Monitoring Console 2.2.4 and earlier. The description states an unspecified vulnerability that allows remote attackers to gain access to a database via a link to a victim who is already connected to the database. The connected/openvas references do not provide ex...

CVE-2008-7130

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to upload arbitrary files via unknown vectors...

CVE-2009-2977

The Cisco Security Monitoring, Analysis and Response System CS-MARS 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace. files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files...

Code injection

The Cisco Security Monitoring, Analysis and Response System CS-MARS 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace. files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files...

CVE-2009-2977

The CVE-2009-2977 entry concerns Cisco CS-MARS (Security Monitoring, Analysis and Response System) 6.0.4 and earlier. The underlying issue is that cleartext passwords are stored in log files (log/sysbacktrace.## files) inside error-logs.tar.gz archives, which could let context-dependent attackers...

[SECURITY] Fedora 10 Update: nagios-3.2.0-2.fc10

Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux and some other NIX variants as a background process,...

CVE-2008-6869

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

CVE-2008-6869

CVE-2008-6869 affects Oramon Oracle Database Monitoring Tool 2.0.1. The root cause is insufficient access control that leaves files under the web root, allowing remote retrieval of sensitive data via a direct request to config/oramon.ini. The consequence is exposure of a database containing crede...

Sguil/PADS Remote Server Crash Vulnerability

No description provided by source. Sguil/PADS Denial of Service exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. More in-depth article available at: http://allmybase.com/?p=72 This mo...

Toward Privacy-Aware OpenSocial Applications

Kun Liu from IBM Research discusses the potential for developing privacy-aware social networking applications through the measurement and monitoring of privacy risks...

CISCO IDS Manager Detection (HTTP)

Detects if CISCO IDS Manager is running on a given host and port. The IDS Device Manager is a web-based Java application that resides on the sensor and is accessed via a secure, encrypted TLS link using standard Netscape and Internet Explorer web browsers to perform various management and...

RedHat Security Advisory RHSA-2009:1100

The remote host is missing updates announced in advisory RHSA-2009:1100. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. A format string flaw was found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump...

RedHat Security Advisory RHSA-2009:1100

The remote host is missing updates announced in advisory RHSA-2009:1100. Wireshark is a program for monitoring network traffic. Wireshark was previously known as Ethereal. A format string flaw was found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump...

CentOS 3 / 5 : wireshark (CESA-2009:1100)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was...

wireshark security update

CentOS Errata and Security Advisory CESA-2009:1100 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program fo...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was...