Looking Glass - Cross-Site Scripting

Looking Glass - Cross-Site Scripting source: https://www.securityfocus.com/bid/14680/info Looking Glass is prone to a cross-site scripting vulnerability. This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Other attacks are also...

[security bulletin] SSRT4702 rev.0 - HP-UX running Veritas 3.3/3.5 unauthorized data access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01218 REVISION: 0 SSRT4702 rev.0 - HP-UX running Veritas 3.3/3.5 unauthorized data access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: 24 August 2005 POTENTIAL...

Cyberstrong eShop Multiple Script ProductCode Parameter SQL Injection

The remote host is running Cyberstrong eShop, a shopping cart written in ASP. The remote version of this software contains several input validation flaws leading to SQL injection vulnerabilities. An attacker may exploit these flaws to affect database queries, possibly resulting in disclosure of...

Skype Technologies Skype 0.921.01.1 - Insecure Temporary File Creation

Skype Technologies Skype 0.921.01.1 - Insecure Temporary File Creation source: https://www.securityfocus.com/bid/14293/info Skype is affected by an insecure temporary file creation vulnerability. Exploitation would most likely result in loss of data or a denial of service if critical files are...

FreeBSD : cdrdao -- unspecified privilege escalation vulnerability (d51a7e6e-c546-11d9-9aed-000e0c2e438a)

The developers of cdrdao report that there is a potential root exploit in the software. In order to be able to succesfully exploit this vulnerability cdrdao must be installed setuid root. When succesfully exploited a local user might get escalated privileges. By default this port is not installed...

FreeBSD : cacti -- potential SQL injection and XSS attacks (96948a6a-e239-11d9-83cf-0010dc5df42d)

iDEFENSE security group disclosed potential SQL injection attacks from unchecked user input and two security holes regarding potential cross site scripting attacks %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin (0c592c4a-1bcc-11d9-a3ec-00061bd2d56f)

The Cyrus SASL DIGEST-MD5 plugin contains a potential buffer overflow when quoting is required in the output. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

[SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 736-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 738-1] New razor packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 736-1] New spamassassin packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory 736-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[security bulletin] SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01165 REVISION: 0 SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The information in...

[DR018] Quartz Composer / QuickTime 7 information leakage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The canonical URI of this advisory is http://remahl.se/david/vuln/ 018/. This advisory concerns an as-yet unpatched problem in QuickTime 7 on Mac OS X 10.4. The reason for disclosure before a vendor patch is that another person realized the potential...

PT-2005-2257 · Netiq +1 · Netiq Security Manager +2

Name of the Vulnerable Software and Affected Versions: NetIQ Security Manager affected versions not specified iSeries Security Solutions affected versions not specified Description: A directory traversal issue in a third-party tool used to secure the iSeries AS/400 FTP server may allow remote...

GLSA-200503-34 : mpg321: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-34 mpg321: Format string vulnerability A routine security audit of the mpg321 package revealed a known security issue remained unpatched. The vulnerability is a result of mpg321 printing embedded ID3 data to the console in ...

HP-UX PHSS_29547 : HPSBUX0310-285 SSRT3642 Potential Security Vulnerabilities Apache web server HP-UX VVOS and Webproxy.

s700800 11.04 Webproxy server 2.0 update : 1. Potential Apache web server crash when it goes into an infinite loop due to too many subsequent internal redirects and nested subrequests. VU379828 2. No de-allocation of file descriptors while servicing CGI scripts through child processes...

HP-UX PHSS_29545 : HPSBUX0310-285 SSRT3642 Potential Security Vulnerabilities Apache web server HP-UX VVOS and Webproxy.

s700800 11.04 Virtualvault 4.5 OWS update : 1. Potential Apache web server crash when it goes into an infinite loop due to too many subsequent internal redirects and nested subrequests. VU379828 2. No de-allocation of file descriptors while servicing CGI scripts through child processes...

CERN httpd CGI Name Handling Remote Overflow

The remote web server stopped responding after sending it a GET request for a CGI script with a arbitrary long file name. This is known to trigger a heap overflow in some servers like CERN HTTPD. An attacker may use this flaw to disrupt the remote service and possibly even run malicious code on t...

OOApp Guestbook - Multiple HTML Injection Vulnerabilities

OOApp Guestbook - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12647/info OOApp Guestbook is reportedly affected by multiple HTML injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input. The...

SUSE-SA:2005:008: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:008 squid. Squid is an Open Source web proxy. A remote attacker was potentially able to crash the Squid web proxy if the logfqdn option was set to 'on' and the DNS replies were manipulated. This is tracked by the Mitre CVE ID...

HP-UX Security patch : PHCO_28717

The remote host is missing HP-UX Security Patch number PHCO28717 . SSRT3483 Potential Security Vulnerability in wall1M command rev.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...