Debian DSA-603-1 : openssl - insecure temporary file

Trustix developers discovered insecure temporary file creation in a supplemental script derchop of the openssl package which may allow local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SA13331] FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability

TITLE: FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13331 VERIFY ADVISORY: http://secunia.com/advisories/13331/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeImage 3.x http://secunia.com/product/4341/...

Mercury Mail Remote IMAP Server Remote Overflow

The remote host is running Mercury Mail server, an IMAP server for Windows. According to its banner, the version of Mercury Mail running on the remote host has multiple stack-based buffer overflow vulnerabilities. A remote, authenticated attacker could exploit these issues to crash the service or...

YaBB Shadow BBCode Tag XSS

The remote host is using the YaBB web forum software. According to its version number, the remote version of this software is vulnerable to JavaScript injection issues using shadow or glow tags. This may allow an attacker to inject hostile JavaScript into the forum system, to steal cookie...

phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure

Title: phpCMS = 1.2.1 Xss Vulnerability, Information disclosure Affects: - = 1.2.1 Effect: Cross Site Attack session hijacking, ... Id: cbsa-0006 Release Date: 2004/11/26 Author: Cyrille Barthelemy [email protected] -- 1. Introduction ------------------------ phpCMS is a content management...

phpMyAdmin: Multiple XSS vulnerabilities

Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. Description Cedric Cochin has discovered multiple cross-site scripting vulnerabilities in phpMyAdmin. These vulnerabilities can be exploited through the PmaAbsoluteUri...

DSA-597-1 cyrus-imapd - buffer overflow

Bulletin has no description...

[SA13268] Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service

TITLE: Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service SECUNIA ADVISORY ID: SA13268 VERIFY ADVISORY: http://secunia.com/advisories/13268/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Fastream NETFile FTP/Web Server 6.x http://secunia.com/product/2455/...

Aztek Forum Multiple Script XSS

The remote host is using Aztek Forum, a web forum written in PHP. A vulnerability exists the remote version of this software - more specifically in the script 'forum2.php', that may allow an attacker to set up a cross-site scripting attack using the remote host. %NASLMINLEVEL 70300 C Tenable...

phpScheduleIt < 1.0.1 Reservation.class.php Arbitrary Reservation Modification

According to its banner, the version of phpScheduleIt on the remote host is earlier than 1.0.1. Such versions are reportedly vulnerable to an undisclosed issue that may allow an attacker to modify or delete reservations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

PT-2004-1962

Name of the Vulnerable Software and Affected Versions: Eset Anti-Virus versions prior to 1.020 16th September 2004 Description: The issue allows remote attackers to bypass antivirus protection by using a compressed file with both local and global headers set to zero. This technique does not preve...

PowerPortal index.php index_page Parameter SQL Injection

The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product that could allow a remote attacker to perform a SQL injection attack against the remote host. An attacker could exploit this flaw to execute arbitrary SQ...

Multiple XSS vulnerability were found in phpMyAdmin, that may allow an attacker to conduct Cross-site scripting (XSS) attacks.

PMASA-2004-3 Announcement-ID: PMASA-2004-3 Date: 2004-11-18 Summary Multiple XSS vulnerability were found in phpMyAdmin, that may allow an attacker to conduct Cross-site scripting XSS attacks. Description We received a security advisory from Cedric Cochin netvigilance.com about those...

DSA-594-1 apache - buffer overflows

Bulletin has no description...

[ GLSA 200411-19 ] Pavuk: Multiple buffer overflows

Gentoo Linux Security Advisory GLSA 200411-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

SlimFTPd Multiple Command Handling Overflow

The remote host appears to be using SlimFTPd, a free, small, standards-compliant FTP server for Windows. According to its banner, the version of SlimFTPd installed on the remote host is prone to one or more buffer overflow attacks that can lead to arbitrary code execution. Note that successful...

Samba Multiple Remote Vulnerabilities

The remote Samba server, according to its version number, is affected by a remote denial of service vulnerability as well as a buffer overflow. The Wild Card DoS vulnerability may allow an attacker to make the remote server consume excessive CPU cycles. The QFILEPATHINFO Remote buffer overflow...

zonelabsFilter.txt

Zone Labs IMsecure Active Link Filter Bypass http://www.kurczaba.com/html/security/0410141.htm ------------------------------------------------- Overview: A vulnerability has been discovered in the Zone Labs IMsecure Active Link Filter Vendor: Zone Labs http://www.zonelabs.com Affected...

Mantis < 0.19.1 Multiple Vulnerabilities

According to its banner, the remote version of Mantis suffers from several information disclosure vulnerabilities that could allow an attacker to view stats of all projects or to receive information for a project after the malicious user was removed from it. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 587-1] New freeam packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 587-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...