CORE-2010-0316 - Novell iManager Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL:...

New Class of XSS Attacks Emerging

A new type of cross-site scripting XSS attack that exploits commonly used network administration tools could be putting users’ data at risk, a researcher says. Read the full article. Dark Reading...

kernel: netfilter: ebtables: enforce CAP_NET_ADMIN

net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAPNETADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traff...

Multiple D-Link Routers Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications =========================================================== Multiple D-Link Routers Authentication Bypass Vulnerability =========================================================== Multiple D-­Link routers suffer from insecure...

[SECURITY] Fedora 10 Update: ocsinventory-1.02.1-1.fc10

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

Security Best Practice: Familiarize Yourself with the Max Ping Size Protection

Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for packets sent from the local host to a destination computer, including the local host's own interfaces.Ping operates by sending Internet...

CVE-2006-5862

Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized NAV before 3.1.1 allows attackers with filesystem write access to have an unknown impact via unknown attack vectors...

IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

Sql injection

Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized NAV before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-2123

CVE-2006-2123 affects Network Administration Visualized (NAV) prior to version 3.0.1. The NAV report interface contains multiple SQL injection vulnerabilities that could allow a remote attacker to execute arbitrary SQL commands via unknown vectors. The underlying issue is untrusted input handling...

[SA19849] Network Administration Visualized SQL Injection Vulnerability

TITLE: Network Administration Visualized SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19849 VERIFY ADVISORY: http://secunia.com/advisories/19849/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Network Administration Visualized 3.x...

Remote Execute vulnerable to denial-of-service

Overview Remote Execute cannot handle more than seven connections simultaneously. If more than seven connections are attempted, Remote Execute will crash, resulting in a denial-of-service condition. Description Remote Execute is a network administration tool for the Windows platform that allows...

IP3 Networks IP3 NetAccess Appliance - SQL Injection

IP3 Networks IP3 NetAccess Appliance - SQL Injection source: https://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an...

Multiple Vendor Malformed SNMP Message-Handling DoS

It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields. An attacker may use this flaw to prevent you from using SNMP to administer your network or use other flaws to execute arbitrary code with the privileges of the SNMP daemon. C Tenable...