3396 matches found
Asked to re-authenticate to delete issue
/jira/secure/DeleteIssue!default.jspa?id=10012 everything seems to work ok, but I try to delete previously existing issue and I get redirected to the URL above. instead of a delete issue page, I get a login page, only it looks messed up - it's the login form table miniwindow except spread 100%...
Symbolic links problem in LogWatch
No description provided...
[SECURITY] [DSA 121-1] New xtell packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 121-1 [email protected] http://www.debian.org/security/ Martin Schulze March 11th, 2002 - -------------------------------------------------------------------------- Package : xtell...
[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...
[SECURITY] [DSA 108-1] New wmtv packages fix symlink vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 108-1 [email protected] http://www.debian.org/security/ Martin Schulze February 7th, 2002 - -------------------------------------------------------------------------- Package : wmtv...
Vulnerabilities in EServ 2.97
There are a couple of vulnerabilities in EServ 2.97. Vulnerability 1 The FTP server doesn't close the sockets that are allocated from using the PASV command. After all ports from 1024 to 5000 are listening after running a lot of PASV commands in a row no users can use passive mode anymore until t...
Sapgui 4.6D for Windows
The Sapgui 4.6D for Windows that we use at work, open a port listen on a port 1024, wenn you connect to this port, maybee with nmap or nc or something else, the sapgui crashed with "unknown connection data". Can you reproduce this? Or is it a local Problem? Greetings Falk -- Falk Siemonsmeier /"...
[SECURITY] [DSA-098-1] two libgtop security problems
Package : libgtop Problem type : remote nobody exploit Debian-specific: no Two different problems where found in libgtop-daemon: The laboratory intexxia found a format string problem in the logging code from libgtopdaemon. There were two logging functions which are called when authorizing a clien...
Advisory: popauth
Hi, there is a symlink problem in the popauth utility, which is part of the qpoper package. The binary is often istalled suid pop and follows symlinks in the -trace file option. This problem has been reported to vendors in June 2001. Impact: in case of suid popauth and valid shell for user pop, t...
[RHSA-2001:141-05] Updated webalizer packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated webalizer packages available Advisory ID: RHSA-2001:141-05 Issue date: 2001-10-24 Updated on: 2001-10-30 Product: Red Hat Powertools Keywords: webalizer cross-site...
Apache Httpd < 1.3.22 : Multiviews can cause a directory listing to be displayed
A vulnerability was found when Multiviews are used to negotiate the directory index. In some configurations, requesting a URI with a QUERYSTRING of M=D could return a directory listing rather than the expected index page...
OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities
According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...
Символьные линки в Informix (symbolic link)
Многочисленные проблемы символьных линков...
sendmail and procmail update
An input validation error in sendmail has been discovered by Cade Cairns of SecurityFocus. This problem can be exploited by local users to gain root access. It is not exploitable by remote attackers without shell access. New packages based on sendmail.8.11.6 have been prepared for Slackware 7.1 a...
Microsoft Windows NT and 2000 Domain Name Servers allow non-authoritative RRs to be cached by default
Overview Microsoft Domain Name Servers hosted on Windows NT or Windows 2000 Server systems run with permissive DNS cache defaults. This may allow unauthorized remote intruders to redirect sites that rely on the vulnerable DNS servers for legitimate information. Description The Domain Name System,...
Roxen security alert: URL decoding vulnerable
Roxen Webserver 2.0 up to version 2.0.92 and 2.1 up to version 2.1.264 has a vulnerability that allows any user to retrieve any file from the host with the privileges of the web server. Having the CGI-module enabled escalates the problem by making it possible to run any executable. Description In...
Проблемы с несколькими мониторами в Identix BioLogon (protection bypass)
Скринсейвер срабатывает только на первом мониторе...
Ошибка форматной строки в groff (format string)
Ошибка форматной строки в /usr/bin/pic используемой LPD...
GroupWise 5.5 User Mailbox Authentication Vulnerability
Advisory ID Internal CORE-2001-0626 GroupWise 5.5 User Mailbox Authentication Vulnerability Core Security Advisory https://www.coresecurity.com Date Published: 2001-06-26 Advisory ID: CORE-2001-0626 Bugtraq ID: None currently assigned. CVE Name: None currently assigned. Title: GroupWise 5.5 User...
[SECURITY] [DSA-062-1] rxvt buffer overflow
Package : rxvt Problem type : buffer overflow Debian-specific: no Samuel Dralet reported on bugtraq that version 2.6.2 of rxvt a VT102 terminal emulator for X have a buffer overflow in the ttprintf function. A local user could abuse this making rxvt print a special string using that function, for...