HP-UX PHSS_28678 : HP-UX running CDE, Remote Unauthorized Privileged Access, Execution of Arbitrary Code (HPSBUX00263 SSRT2373 rev.3)

s700800 11.00 CDE DevKit Periodic Patch : Potential security vulnerabilities in CDE libraries and programs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS28678. The text itself is copyright C...

Default Password (forgot) for 'super' Account

The account 'super' on the remote host has the password 'forgot'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "super"; password = "forgot"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Low: Red Hat Security Advisory: kdenetwork security update

Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...

[SECURITY BULLETIN] SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBOV01121 REVISION: 0 SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The information ...

HP-UX PHSS_30171 : HP-UX XFree86, Remote Unauthorized Privileged Access, Execution of Arbitrary Code (HPSBUX01018 SSRT4692 rev.2)

s700800 11.23 Xserver cumulative patch : A potential security vulnerability has been identified with HP UX, where a buffer overflow in XFree86 could be remotely exploited to gain unauthorized privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

HP-UX PHSS_30671 : HP-UX running CDE dtlogin, Remote Unauthorized Privileged Access, Denial of Service (DoS) (HPSBUX01038 SSRT4721 rev.2)

s700800 11.23 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running CDE dtlogin software, where the potential vulnerability may be exploited locally or remotely to allow unauthorized privileged access or a Denial of Service DoS. %NASLMINLEVEL 70300 C...

HP-UX PHSS_30586 : HP-UX XFree86, Remote Unauthorized Privileged Access, Execution of Arbitrary Code (HPSBUX01018 SSRT4692 rev.2)

s700800 11.04 VVOS Xserver cumulative patch : A potential security vulnerability has been identified with HP UX, where a buffer overflow in XFree86 could be remotely exploited to gain unauthorized privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and pat...

Veritas NetBackup Remote Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Debian DSA-326-1 : orville-write - buffer overflows

Orville Write, a replacement for the standard write1 command, contains a number of buffer overflows. These could be exploited to gain either gid tty or root privileges, depending on the configuration selected when the package is installed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugzilla Security Advisory July 10, 2004 Summary ======= Bugzilla is a Web-based bug-tracking system, used by a large number of software projects. This advisory covers security bugs that have recently been discovered and fixed in the Bugzilla code: In...

Sun Solaris passwd priviledge escalation

No description provided...

Microsoft ListBox/ComboBox Control - 'User32.dll' Buffer Overrun

source: https://www.securityfocus.com/bid/8827/info Microsoft has reported the existence of a local buffer overrun vulnerability in an undisclosed User32.dll library function. This function is used by applications implementing the use of ListBox or ComboBox controls and will be triggered when the...

SA-20031006 slocate buffer overflow - exploitation proof

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ====================================================================== Security advisory 20031006 - Appendix A proof of concept - ---------------------------------------------------------------------- Product: slocate Vulnerability type: buffer overfl...

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access source: https://www.securityfocus.com/bid/8502/info An SQL injection vulnerability has been reported in Attila PHP that could allow an attacker to gain unauthorized privileged access to a target site. This could be accomplished by...

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access

source: https://www.securityfocus.com/bid/8502/info An SQL injection vulnerability has been reported in Attila PHP that could allow an attacker to gain unauthorized privileged access to a target site. This could be accomplished by requesting a URI including parameters designed to influence the...

IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities (1)

IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities 1 source: https://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exist...

DSA-336 linux-kernel-2.2.20 - several vulnerabilities

Bulletin has no description...

Various Axis products allow unauthorized remote privileged access

Overview A vulnerability in various Axis Communications products may allow unauthorized remote privileged access. Description Axis Communications Inc. produces network-enabled cameras and video servers. The company describes itself as "an innovative market leader in network video and print server...

HP-UX "rexec" command vulnerable to buffer overflow when supplied overly long command line argument to "-l" option

Overview A buffer overflow vulnerability in the rexec program supplied in some versions of the HP-UX operating system could allow local users to gain privileged access. Description The rexec program allows local users to execute commands on remote servers. rexec calls the rexec subroutine to act ...

PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Poptop...