Solaris 2.5.1 (sparc) : 103699-02

SunOS 5.5.1: /usr/sbin/ping patch. Date this patch was last updated by Sun : Jul/14/98 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 110955-06

SunOS 5.8: /kernel/strmod/timod patch. Date this patch was last updated by Sun : Mar/21/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 108987-19

SunOS 5.8: Patch for patchadd and patchrm. Date this patch was last updated by Sun : Nov/30/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

The Cult of a Cardinal Number

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------ The Cult of a Cardinal Number Equal to the Sum of 1+1 by Phantasmal Phantasmagoria [email protected] - ---- Table of Contents ------------- 1 - Introduction 2 - Technical Details 3 - Final Thoughts - ----...

Remote Execution of Commands in Omail Webmail 0.98.4 and earlier

Product: Omail Webmail Author: Olivier Mueller Vulnerable Versions: - 0.98.x - 0.97.x - ... Omail is a Webmail coded in perl for qmail, optionally with vmailmgr or vpopmail. There is a security flaw in Omail which, if installed by default, allows for remote root access. The minimum risk is exposu...

SILLY BEHAVIOR Part II : Internet Explorer 5.5 - 6.0

Thursday, May 1, 2003 The following represents a trivial yet elaborate method of injecting arbitrary html into the "My Computer" zone on win98 using the Internet Explorer series of browsers. The manufacturer, commonly known as "Microsoft" has a done a splendid job of battening down the hatches wi...

PEEL (PHP)

Informations : °°°°°°°°°°°°°° Version : 1.0b Website : http://www.mapetite-entreprise.com Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° modeles/haut.php : ----------------------------------------------------------- ? $langfile = $dirroot."/lang/".$SESSION"lang"."/lang.php"; requi...

[Mantis Advisory/2002-07] Bugs in private projects listed on 'View Bugs'

Mantis Advisory/2002-07 Bugs in private projects listed on 'View Bugs' 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Proof of Vulnerability 6. Credit 7. Contact details 1. Introduction Mantis is an Open Source web-based...

latest Progress patch has suid issues AGAIN.

Progress 9.1C11 Patch date 2002/04/26 http://www.progress.com/patches/patchlst/91C-178v.htm Once again by ignoring my warnings and suggestions and even offers to audit code prior to release for the public, Progress Software has happened upon a security hole. If you will recall from last month...

GroupWise Padlock Speculative Info

---------------------- GroupWise Padlock Info ---------------------- History ------- Novell was notified by someone around the 6th of August about a security flaw in GroupWise that apparently allowed basically anyone with access to the GroupWise server to do "bad stuff". August 14th brought the...

Intel Express Switch 500 series DoS

Intel Express Switch 500 series DoS Advisory Code: VIGILANTE-2000007 Release Date: August 28, 2000 Systems Affected: Intel Express Switch 550F - Firmware version 2.63 - Firmware version 2.64 Based on the response from Intel quoted below, it is very likely that other switches from the same series...

Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal (MS00-006)

Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal MS00-006 source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the...