9917 matches found
DSA-613-1 ethereal - infinite loop
Bulletin has no description...
mpg123: Playlist buffer overflow
Background mpg123 is a MPEG Audio Player. Description Bartlomiej Sieka discovered that mpg123 contains an unsafe strcat to an array in playlist.c. This code vulnerability may lead to a buffer overflow. Impact A remote attacker could craft a malicious playlist which, when used, would result in the...
DSA-612-1 a2ps - unsanitised input
Bulletin has no description...
PHP: Multiple vulnerabilities
Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description Stefan Esser and Marcus Boerger reported several different issues in...
RHEL 2.1 / 3 : zip (RHSA-2004:634)
An updated zip package that fixes a buffer overflow vulnerability is now available. The zip program is an archiving utility which can create ZIP-compatible archives. A buffer overflow bug has been discovered in zip when handling long file names. An attacker could create a specially crafted path...
WordPress < 1.2.2 Multiple Vulnerabilities
According to its banner, the remote host has a version of WordPress that is is vulnerable to various flaws which may allow an attacker to perform an HTML injection attack against the remote host or allow an attacker to execute arbitrary SQL statements against the remote database. %NASLMINLEVEL...
Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service (885249)
Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service 885249 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use the Microsoft DHCP Server service. Impact of Vulnerability: Remote Code Executi...
Debian DSA-609-1 : atari800 - buffer overflows
Adam Zabrocki discovered multiple buffer overflows in atari800, an Atari emulator. In order to directly access graphics hardware, one of the affected programs is installed setuid root. A local attacker could exploit this vulnerability to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network...
DSA-608-1 zgv - integer overflows, unsanitised input
Bulletin has no description...
PunBB < 1.1.2 install.php XSS
The remote version of PunBB is vulnerable to cross-site scripting flaws through 'install.php' script. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser resulting in the possible theft of authentication cookies, mis-representation of site...
Citadel/UX lprintf() Function Remote Format String
The remote host is running Citadel/UX, a messaging server for Unix. There is a format string issue in the remote version of this software. A remote attacker could use this to crash the service, or execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
IlohaMail < 0.8.14RC1 Unspecified Vulnerability
The remote host is running at least one instance of IlohaMail version 0.8.13 or earlier. Such versions are reportedly affected by an unspecified vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid15935;...
OpenText FirstClass HTTP Daemon /Search Large Request Remote DoS
The remote host is running OpenText FirstClass, a web-based unified messaging system. The remote version of this software is vulnerable to an unspecified denial of service attack that could allow an attacker to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc";...
[SECURITY] [DSA 607-1] New libxpm packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 607-1 [email protected] http://www.debian.org/security/ Martin Schulze December 10th, 2004 http://www.debian.org/security/faq -...
PHProjekt: setup.php vulnerability
Background PHProjekt is a modular groupware web application used to coordinate group activities and share files. Description Martin Muench, from it.sec, found a flaw in the setup.php file. Impact Successful exploitation of the flaw allows a remote attacker without admin rights to make unauthorize...
[SA13377] Novell NetMail Default NMAP Authentication Credential Security Issue
TITLE: Novell NetMail Default NMAP Authentication Credential Security Issue SECUNIA ADVISORY ID: SA13377 VERIFY ADVISORY: http://secunia.com/advisories/13377/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of system information, Exposure of sensitive information WHERE: From local...
DSA-606-1 nfs-utils - wrong signal handler
Bulletin has no description...
Apache Jakarta Lucene results.jsp XSS
The remote host is using Apache Jakarta Lucene, a full-featured text search engine library implemented in Java. There is a cross-site scripting vulnerability in the script 'results.jsp' that may allow an attacker to steal the cookies of legitimate users on the remote host. %NASLMINLEVEL 70300 Thi...
Debian DSA-605-1 : viewcvs - settings not honored
Haris Sehic discovered several vulnerabilities in viewcvs, a utility for viewing CVS and Subversion repositories via HTTP. When exporting a repository as a tar archive the hidecvsroot and forbidden settings were not honoured enough. When upgrading the package for woody, please make a copy of your...
CUPS Internet Printing Protocol (IPP) Implementation Empty UDP Datagram Remote DoS
The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. %NASLMINLEVEL 70300 This script was written ...