Solaris 9 (sparc) : 122608-07

The remote host is missing Sun Security Patch number 122608-07 Solaris Security Toolkit 4.2. Date this patch was last updated by Sun : Mon Sep 15 02:34:48 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as...

Solaris 5.7 (sparc) : 109209-20

Sun Cluster 2.2: Framework/Comm Patch. Date this patch was last updated by Sun : Feb/13/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

PT-2006-5784 · Joomla · Joomlaboard Forum

Name of the Vulnerable Software and Affected Versions: Joomlaboard Forum Component com joomlaboard versions prior to 1.1.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to specific PHP files, including file upload.php and image...

Mozilla Firefox JavaScript Navigator object vulnerability

Added: 08/14/2006 CVE: CVE-2006-3677 BID: 19192 OSVDB: 27559 Background When used in a web page, Java references properties of the window.navigator object as it starts up in Firefox or SeaMonkey. Problem If a web page replaces the navigator object before starting Java, then the page could cause t...

PT-2006-3277 · Microsoft · Skype

Name of the Vulnerable Software and Affected Versions: Skype versions 2.0..104 through 2.5..78 Description: The issue is an argument injection vulnerability in the URI handler that allows remote authorized attackers to download arbitrary files via a crafted URL. This can lead to unauthorized...

JVN#74294680 Winny buffer overflow vulnerability

Impact If a remote attacker sends a malicious packet, Winny will crash. It is publicly reported that arbitrary code may be executed with the privilege running Winny. Solution Products Affected Winny 2.0 b7.1 and earlier As of May 25, 2006, exploit information is publicly available. Currently we a...

PT-2006-2671 · Maxdev · Maxdev Md-Pro

Name of the Vulnerable Software and Affected Versions: MAXdev MDPro versions prior to 1.076 Description: The issue allows remote attackers to obtain the full path of the server via a direct request to "includes/legacy.php". Recommendations: For versions prior to 1.076, consider restricting access...

PT-2006-2134 · Nmdeluxe · Nmdeluxe

Name of the Vulnerable Software and Affected Versions: NMDeluxe versions prior to 1.0.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the news.php file. Recommendations: For versions prior to 1.0.1, update to...

PT-2005-5315 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! version 1.03 Description: The issue allows remote attackers to cause a denial of service due to resource consumption by utilizing a large number of Search Mambots, as the software does not restrict their number. Recommendations: For...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

Download ring tone-never spend money on. [recommended method]-vulnerability warning-the black bar safety net

Your phone has a data line? If you want to download the ring tone, as long as from the online copy down, Then the data line is transmitted to the phone you can If 1 3 0-1 3 9 phone ring tone page does not allow to view code, Enter the PHS ring tones site you can in the audition page view...

Mercury32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow

Mercury32 Mail Server 4.01a Pegasus - IMAP Buffer Overflow / Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not...

PT-2005-3677 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 4.0 through 4.2 Description: The issue is related to the improper handling of dynamic port forwarding when a listen address is not provided, potentially causing OpenSSH to enable the GatewayPorts functionality. Recommendation...

PT-2005-2798 · Todd Miller · Sudo

Name of the Vulnerable Software and Affected Versions: Sudo version 1.6.8p7 Description: The issue allows local users to potentially gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. However, it has been noted that Sudo catches SIGINT and returns an empt...

PT-2005-2455 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue affects multiple dissectors in Ethereal, including WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, and SMB PIPE. It allows remote attackers to cause a denial ...

Horde Turba common-footer.inc Parent Frame Page Title XSS

According to its version, the remote installation of Turba fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...

Sun Java System Web Proxy Server Unspecified Remote Overflow

The remote host is running the SunOne Web Proxy. This version is reported vulnerable to a number of remote buffer overflows. Alledgedly, successful exploitation would result in the attacker executing arbitrary commands on the remote SunOne Web Proxy server. C Tenable Network Security, Inc. includ...

CVS < 1.11.20 / 1.12.12 Multiple Unspecified Vulnerabilities

According to its version number, the remote CVS server has unspecified vulnerabilities. This includes a double free, and a buffer overflow. A remote attacker could exploit these to crash the server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc";...

xloadimage security update

CentOS Errata and Security Advisory CESA-2005:332 A new xloadimage package that fixes bugs in handling malformed tiff and pbm/pnm/ppm images, and in handling metacharacters in filenames is now available. This update has been rated as having low security impact by the Red Hat Security Response Tea...

modernBill.txt

GulfTech Security Research April 10th, 2005 Vendor : ModernGigabyte, LLC URL : http://www.modernbill.com/ Version : ModernBill 4.3.0 && Earlier Risk : Multiple Vulnerabilities Description: ModernBill is a widely used billing and management software used by webhosts to manage billing and financial...