Misc information on News server

This script detects if the NNTP server is open to outside, counts the number of groups, and tries to post outside. This channel may been used by virus or trojan. OpenVAS Vulnerability Test $Id: nntpinfo.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misc information on News server Authors:...

yawcam 0.2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/13295/info Yawcam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. GET ................\windows\system.ini HTTP/1.0 GET ................\windows\system.ini HTTP/1.0...

rssh protection bypass

Access outside jail is possible...

security flaw

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path...

Linux VServer Project 1.2x - Chroot Breakout

Linux VServer Project 1.2x - Chroot Breakout / source: https://www.securityfocus.com/bid/9596/info VServer is reported prone to a breakout vulnerability that allows a malicious user to escape from the context of the chrooted root directory of the virtual server. This issue is due to the VServer...

CVE-2001-0263

Gene6 G6 FTP Server 2.0 (BPFTP Server 2.10) is affected by an information-disclosure flaw where attackers can read file attributes outside the FTP root via SIZE and MDTM when the show relative paths option is disabled. Root cause: inadequate restriction of access to attributes outside the FTP roo...

Check Point Software Firewall-1 3.0/1 4.0 / Cisco PIX Firewall 4.x/5.x - 'ALG' Client

// source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind firewalls. Whereas previous descriptions of attacks of this style were server based...

PT-1999-1155 · Icq · Icq Webserver

Name of the Vulnerable Software and Affected Versions: ICQ Webserver affected versions not specified Description: The issue allows remote attackers to access arbitrary files outside of the user's personal directory. Recommendations: At the moment, there is no information about a newer version tha...

Security Update For Exchange Server 2013 CU2 (KB2880833)

The security update addresses the vulnerabilities by updating the affected Oracle Outside In libraries to a non-vulnerable version, and the vulnerabilities that Exchange Server could allow remote code execution...

Security Update For Exchange Server 2013 CU13 (KB3184736)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow remote code execution in some Oracle Outside In libraries that are built into Exchange Server if an attacker sends an email with a specially crafted attachment to a...

Update for Office Communications Server 2007 R2, Outside Voice Control (KB 980372)

This Package fixes issues described in KB Article 980372...

Security Update For Exchange Server 2013 CU3 (KB2880833)

The security update addresses the vulnerabilities by updating the affected Oracle Outside In libraries to a non-vulnerable version, and the vulnerabilities that Exchange Server could allow remote code execution...

Update Rollup 21 for Exchange Server 2007 Service Pack 3 (KB3184711)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow remote code execution in some Oracle Outside In libraries that are built into Exchange Server if an attacker sends an email with a specially crafted attachment to a...