408 matches found
AIX 530007 : U825034
The remote host is missing AIX PTF U825034 which is related to the security of the package devices.pci.1410d002.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...
AIX 530007 : U821392
The remote host is missing AIX PTF U821392 which is related to the security of the package bos.rte.control You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530008 : U822085
The remote host is missing AIX PTF U822085 which is related to the security of the package bos.adt.libm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 610001 : U821534
The remote host is missing AIX PTF U821534 which is related to the security of the package bos.sysmgt.sysbr You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
Sun Java System Directory Server信息泄漏漏洞
BUGTRAQ ID: 34548 CNCAN ID：CNCAN-2009041704 Sun Java System Directory Server是一款Java企业系统的一个组件，为企业管理大量用户信息提供用户管理基础架构。 Sun Java System Directory Server包含的在线帮助组件存在安全问题，远程攻击者可以利用漏洞判断文件或目录是否存在，导致敏感信息泄漏。 目前没有详细漏洞细节提供。 Sun Java System Directory Server Enterprise Edition 5 Sun Java System Directory Server...
Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes
Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Name Unprivileged DB users can see APEX password hashes in FLOWS030000.WWVFLOWUSER CVE-2009-0981 Systems Affected APEX 3.0 optional component of 11.1.0.7 installation Severity High Risk Category Password...
AIX 610000 : U820674
The remote host is missing AIX PTF U820674 which is related to the security of the package bos.acct You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530007 : U821362
The remote host is missing AIX PTF U821362 which is related to the security of the package devices.common.IBM.sissas.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 530006 : U819473
The remote host is missing AIX PTF U819473 which is related to the security of the package bos.sysmgt.nim.client You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530007 : U821112
The remote host is missing AIX PTF U821112 which is related to the security of the package bos.cpr You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
MySQL命令行客户端HTML特殊字符HTML注入漏洞
BUGTRAQ ID:31486br / CNCAN ID：CNCAN-2008100103br / br / MySQL是一款开放源代码的数据库服务程序。br / MySQL命令行客户端没有对其输出进行过滤处理，远程攻击者可以利用漏洞获得敏感信息。br / MySQL命令行客户端在它的输出中对HTML特定字符如""缺少引用处理，允许攻击者写数据到表中来隐藏或修改输出的记录，并注入恶意代码，如通过Javascript执行跨站脚本或跨站请求伪造攻击。 MySQL AB MySQL 5.1.26 MySQL AB MySQL 5.1.23 MySQL AB MySQL 5.1.22 MySQ...
Cisco IOS NAT Skinny Call控制协议多个远程拒绝服务漏洞
BUGTRAQ ID: 31359 CVE ID: CVE-2008-3810 CVE-2008-3811 CNCVE ID：CNCVE-20083810 CNCVE-20083811 Cisco IOS Skinny Call控制协议是Cisco专利的语音通讯协定，被用来促进在 CallManager与IP电话之间的来电管理功能。 Cisco IOS SCCP协议存在多个问题，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 Skinny Call Control Protocol SCCP在SCCP客户端和呼叫管理器Call Manager之间启用语音通信，通常CM默认在TCP...
IBM WebSphere Application Server 'FileServing'功能未明漏洞
BUGTRAQ ID: 31186 CNCAN ID：CNCAN-2008091602 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server 'FileServing'功能存在安全问题，目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1.18 IBM Websphere Application Server 6.1.17 IBM Websphere Application Server 6.1.15 IBM Websphere...
Nortel Switched Firewall产品SNMPv3 HMAC验证绕过漏洞
CNCAN ID：CNCAN-2008091606 Nortel Switched Firewall是一款交换式防火墙产品。 Nortel Switched Firewall不正确处理伪造的SNMPv3报文，远程攻击者可以利用漏洞绕过验证查看和修改设备配置。 SNMPv3的使用keyed-Hash Message Authentication Code HMAC进行验证，构建伪造的SNMPv3报文可绕过验证，读取和修改设备中的任意SNMP对象，导致设备的配置被泄漏和修改。 Nortel Switched Firewall 5100 Series Nortel Switched...
VMware ISAPI扩展远程拒绝服务漏洞
BUGTRAQ ID:30935 CVE ID：CVE-2008-3697 CNCVE ID：CNCVE-20083697 ISAPI是IIS功能扩展，Vmware在服务器产品中使用ISAPI扩展。 VMware使用的其中之一ISAPI处理恶意请求存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 发送畸形的请求，IIS可关闭，IIS 6.0可以自动重新启动，但是IIS 5.0在当启动类型设置为手动时不能自动启动。 VMWare Server 1.0.7 build 108231 VMWare Server 1.0.7 目前供应商已经提供升级程序，可联系供应商获得补丁信息：...
AIX 530006 : U819393
The remote host is missing AIX PTF U819393 which is related to the security of the package bos.rte.bindcmds You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
newsx 'read_article()'缓冲区溢出漏洞
BUGTRAQ ID: 30231 CNCAN ID：CNCAN-2008071603 NewsX NNTP客户端是一款用于访问Internet News服务器的程序。 NewsX 'readarticle'存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题代码如下： --- src/getarticle.c --- static int readarticlelong where,char group char linebufMAXHEADERSIZE+1, line; ... line=linebuf; ... for ;; if...
IBM Data ONTAP存在多个漏洞
BUGTRAQ ID: 30160 CNCAN ID：CNCAN-2008071105 IBM Data ONTAP是一套完全集成的多节点解决方案，满足高性能计算HPC的应用需求。 IBM Data ONTAP存在多个未明安全问题，目前没有任何详细漏洞细节提供。 IBM Data ONTAP 7.1 + Sun Solaris 2.6 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372...
Sun Solaris 'e1000g(7D)'驱动远程未明拒绝服务漏洞
BUGTRAQ ID: 29730 CNCAN ID：CNCAN-2008061905 Sun Solaris是一款商业性质的操作系统。 Sun Solaris使用的Intel 82571/82572网络接口的Solaris e1000g7D千兆以太驱动存在安全问题，远程攻击者可以利用漏洞使所有通信阻断，导致拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv92 Sun OpenSolaris build snv22 Sun OpenSolaris build snv19...
Cisco BBSM Captive Portal Cross-site Scripting
Title: Cisco BBSM Captive Portal Cross-site Scripting ------------------------------------------------------------- Vendor: Cisco Systems Vendor URL: www.cisco.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...