9917 matches found
DSA-685-1 emacs21 - format string
Bulletin has no description...
[SA14262] NewsBruiser Comment System Security Bypass Vulnerability
TITLE: NewsBruiser Comment System Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14262 VERIFY ADVISORY: http://secunia.com/advisories/14262/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: NewsBruiser 2.x http://secunia.com/product/4654/ DESCRIPTION: Jarno has...
Open WebMail openwebmail.pl logindomain Parameter XSS
The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script code in the context of a user's web browser. %NASLMINLEVEL 70300 This script was writte...
GLSA-200502-22 : wpa_supplicant: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200502-22 wpasupplicant: Buffer overflow vulnerability wpasupplicant contains a possible buffer overflow due to the lacking validation of received EAPOL-Key frames. Impact : An attacker could cause the crash of wpasupplicant using...
Low: Red Hat Security Advisory: cpio security update
An updated cpio package that fixes a umask bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask whe...
Low: Red Hat Security Advisory: vim security update
Updated vim packages that fix security vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. Ciaran McCrees...
Debian DSA-680-1 : htdig - unsanitised input
Michael Krax discovered a cross site scripting vulnerability in ht://dig, a web search system for an intranet or small internet. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-680. The te...
DSA-681-1 synaesthesia - privilege escalation
Bulletin has no description...
GLSA-200501-42 : VDR: Arbitrary file overwriting issue
The remote host is affected by the vulnerability described in GLSA-200501-42 VDR: Arbitrary file overwriting issue Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that VDR accesses user-controlled files insecurely. Impact : A local attacker could create malicious lin...
GLSA-200501-27 : Ethereal: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200501-27 Ethereal: Multiple vulnerabilities There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.9, including: The COPS dissector could go into an infinite loop CAN-2005-0006. The DLSw dissector could caus...
mod_python: Publisher Handler vulnerability
Background modpython is an Apache module that embeds the Python interpreter within the server allowing Python-based web-applications to be created. Description Graham Dumpleton discovered a vulnerability in modpython's Publisher Handler. Impact By requesting a specially crafted URL for a publishe...
DSA-676-1 xpcd - buffer overflow
Bulletin has no description...
DSA-677-1 sympa - buffer overflow
Bulletin has no description...
AWStats fails to properly filter user-supplied input
Overview A lack of input validation in AWStats may allow a remote attacker to execute arbitrary commands. Description AWStats is a Perl CGI script that collects and graphically displays statistics from web, FTP, and mail servers. The configdir parameter, within the awstats.pl Perl script, is...
PHP-Fusion < 5.00 viewthread.php Arbitrary Message Thread / Forum Access
A vulnerability exists in the version of PHP-Fusion installed on the remote host that may allow an attacker to read the contents of arbitrary forums and threads, regardless of the attacker's privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Microsoft Windows XP named pipe fails to restrict anonymous access
Overview The Server service running on Microsoft Windows XP leaks authentication information. Description The Server service srvsvc.dll is a component of the Server Message Block SMB, and its follow-on, Common Internet File System CIFS. These are network protocols that Windows uses to share files...
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution (890047)
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution 890047 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
Mambo Site Server mos_change_template XSS
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host because of its failure to sanitize input to the 'return' and 'moschangetemplate' parameters of the 'index.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Debian DSA-664-1 : cpio - broken file permissions
It has been discovered, that cpio, a program to manage archives of files, creates output files with -O and -F with broken permissions due to a reset zero umask which allows local users to read or overwrite those files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
[SA14080] SmarterMail Attachment Upload Vulnerability
TITLE: SmarterMail Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA14080 VERIFY ADVISORY: http://secunia.com/advisories/14080/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SmarterMail http://secunia.com/product/3154/ DESCRIPTION: Soroush Dalili has...