3598 matches found
CVE-2005-0584
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks...
[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 686-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2005 http://www.debian.org/security/faq -...
synaesthesia sound visualisation symbolic links problem
Symbolic links problem due to access to user's file with elevated privileges...
KDE desktop manager dcopidlng script symbolic links problem
Unsafe temporary files handling...
Mandrake Linux Security Advisory : squid (MDKSA-2005:034)
More vulnerabilities were discovered in the squid server : The LDAP handling of search filters was inadequate which could be abused to allow logins using severial variants of a single login name, possibly bypassing explicit access controls CVE-2005-0173. Minor problems in the HTTP header parsing...
Ingate Firewall disabled user PPTP disconnection problem
Then user is disabled active PPTP sessions are not disconnected...
FireHOL Linux firewall builder symbolic links problem
Symbolic links problem on temporary files creation...
bmv PostScript viewer symbolic links problem
Symbolic links problem on temporary files creation...
CVE-2004-2655
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...
[SECURITY] [DSA 613-1] New ethereal packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 613-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...
mirrorselect symbolic links problem
Symlink problem on temporary files creation...
Manage authentication for NTLM proxies
We want to access RRS content internally, but we are using a secured proxy requiring authentication via NTLM or user/password. We setted up the standard Java proxies properties: http.proxyHost, http.proxyPort and http.auth.ntlm.domain. But it seams that the http.auth.ntlm.domain properties does n...
TC-IDE unfiltered shell characters problem
Shell characters filtering problem on external program execution in multiple utilities...
SQL injection in vBulletin forums (last10.php)
hi all, a new SQL injection found in VBulletin Forums 3.0.x the Vulnerabilite found in last.php, last 10 topics hack. last.php?fsel=,user.password20as20title,user.20 202020username20as20lastposter20FROM20user, thread2020202020WHERE20usergroupid=620LIMIT 201 to solve the problem delet fsel? from...
04WebServer Three Vulnerabilities
Summary 04WebServer is a HTTP server developed by Soft3304 for Windows platforms. It is an easy-to-configure personal HTTP server that supports CGI, SSI, WebDAV and SSL/TLS. This advisory documents three vulnerabilities that were found in version 1.42 of 04WebServer. Tested System 04WebServer...
Gentoo symbolic links problem
dispatch-conf and dpkg symbolic links problem...
DSA-590-1 gnats - format string vulnerability
Bulletin has no description...
[SECURITY] [DSA 580-1] New iptables packages fix modprobe failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 580-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2004 http://www.debian.org/security/faq -...