EUVD-2006-5963

Malware in sbrugna...

EUVD-2006-5962

Malware in sbrugna...

NetJetServer多个远程安全漏洞

NetJetServer是一款实用的Internet/Intranet/Personal Web服务器。 NetJetServer admlgnadmin.asp文件中的登录进程存在输入验证错误，允许攻击者以管理员权限登录到Web站点。 此外，NetJetServer没有对GLOBAL.ASA文件设置正确的权限，可能允许用户非授权访问该文件。 Renasoft NetJetServer 2.5.3.939 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.renasoft.com/default.asp...

CVE-2006-5980

admlgnadmin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly perform login authentication, which allows remote attackers to obtain administrative privileges. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5979

Renasoft NetJetServer 2.5.3.939, and possibly earlier, uses insecure permissions for Global.asa, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5980

admlgnadmin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly perform login authentication, which allows remote attackers to obtain administrative privileges. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-5980

The CVE-2006-5980 entry concerns adm_lgn_admin.asp in Renasoft NetJetServer 2.5.3.939 (and possibly earlier) with a flaw where login authentication is not performed properly, enabling remote attackers to obtain administrative privileges. The vulnerability is documented across multiple sources (NV...

CVE-2006-5979

The CVE-2006-5979 entry concerns Renasoft NetJetServer 2.5.3.939 (and possibly earlier) where insecure permissions on Global.asa may allow remote attackers to obtain sensitive information. The available documents state the affected software and the underlying issue but do not provide exploit step...

CVE-2006-5979

Renasoft NetJetServer 2.5.3.939, and possibly earlier, uses insecure permissions for Global.asa, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; details are obtained from third party sources...