9917 matches found
IceWarp Web Mail Multiple Flaws (1)
The remote host is running IceWarp Web Mail - a webmail solution available for the Microsoft Windows platform. The remote version of this software is vulnerable to multiple input validation issues that could allow an attacker to compromise the integrity of the remote host. %NASLMINLEVEL 70300 C...
DSA-565-1 sox - buffer overflows
Bulletin has no description...
DSA-562-2 mysql - several vulnerabilities
Bulletin has no description...
MySQL < 3.23.59 / 4.0.21 Multiple Vulnerabilities
The remote host is running a version of the MySQL database which is older than 4.0.21 or 3.23.59. MySQL is a database which runs on both Linux/BSD and Windows platform. The remote version of this software is vulnerable to specially crafted 'ALTER TABLE SQL' query which can be exploited to bypass...
gettext: Insecure temporary file handling
Background gettext is a set of utilities for the GNU Translation Project which provides a set of tools and documentation to help produce multi-lingual messages in programs. Description gettext insecurely creates temporary files in world-writeable directories with predictable names. Impact A local...
WordPress Blog HTTP Splitting Vulnerability
No description provided by source. This script is C Tenable Network Security ifdescription scriptid15443; scriptbugtraqid11348; scriptversion "$Revision: 1.1 $"; name"english" = "WordPress HTTP Splitting Vulnerability"; scriptnameenglish:name"english"; desc"english" = " The remote host is running...
[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
Gentoo Linux Security Advisory GLSA 200410-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
ArGoSoft FTP Server XCWD Remote Overflow
The remote host is running the ArGoSoft FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site i from sharing some resources with the rest of the world. C Tenable Network...
DSA-600-1 samba - arbitrary file access
Bulletin has no description...
DSA-557-1 pppoe - missing privilegue dropping
Bulletin has no description...
Solaris 7 (sparc) : 108414-07
SunOS 5.7: /usr/bin/cpio patch. Date this patch was last updated by Sun : Sep/27/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Firefox < 0.10.1 Download Directory Arbitrary File Deletion
The installed version of Firefox is earlier than 0.10.1. Such versions contain a weakness that could allow a remote attacker to delete arbitrary files in the user download directory. To exploit this, an attacker would need to trick a user into viewing a malicious web page. C Tenable Network...
sharutils: Buffer overflows in shar.c and unshar.c
Background sharutils contains utilities to manage shell archives. Description sharutils contains two buffer overflows. Ulf Harnhammar discovered a buffer overflow in shar.c, where the length of data returned by the wc command is not checked. Florian Schilhabel discovered another buffer overflow i...
[Full-Disclosure] [SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 555-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2004 http://www.debian.org/security/faq -...
DSA-555-1 freenet6 - file permissions
Bulletin has no description...
Debian DSA-264-1 : lxr - missing filename sanitizing
Upstream developers of lxr, a general hypertext cross-referencing tool, have been alerted of a vulnerability that allows a remote attacker to read arbitrary files on the host system as user www-data. This could disclose local files that were not meant to be shared with the public. %NASLMINLEVEL...
Debian DSA-092-1 : wmtv - local root exploit
Nicolas Boullis found a nasty security problem in the wmtv a dockable video4linux TV player for windowmaker package as distributed in Debian GNU/Linux 2.2. wmtv can optionally run a command if you double-click on the TV window. This command can be specified using the -e command line option...
Debian DSA-041-1 : joe - local exploit
Christer Oberg of Wkit Security AB found a problem in joe Joe's Own Editor. joe will look for a configuration file in three locations: The current directory, the users homedirectory $HOME and in /etc/joe. Since the configuration file can define commands joe will run for example to check spelling...
Debian DSA-252-1 : slocate - buffer overflow
A problem has been discovered in slocate, a secure locate replacement. A buffer overflow in the setgid program slocate can be used to execute arbitrary code as group slocate. This can be used to alter the slocate database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
Debian DSA-352-1 : fdclone - insecure temporary directory
fdclone creates a temporary directory in /tmp as a workspace. However, if this directory already exists, the existing directory is used instead, regardless of its ownership or permissions. This would allow an attacker to gain access to fdclone's temporary files and their contents, or replace them...