9915 matches found
[SECURITY] [DSA-370-1] New pam-pgsql packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 370-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-356-1] New xtokkaetama packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 356-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 30th, 2003 http://www.debian.org/security/faq -...
DSA-359 atari800 - buffer overflows
Bulletin has no description...
[SECURITY] [DSA-353-1] New sup packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 353-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 29th, 2003 http://www.debian.org/security/faq -...
[Full-Disclosure] Emulex FibreChannel Hub Vulnerable to SNMP DoS Attack
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Emulex FibreChannel Hub Vulnerable to SNMP DoS Attack Number : 20030703-01-I Date : July 25, 2003 Reference : CERT CA-2002-03 Reference : CVE CAN-2002-0013 Reference : SGI BUG 882516 Fixed in : See Workaround SGI provides this...
paFileDB <= 3.1 Multiple Vulnerabilities (1)
The remote host is running a version of paFileDB that is prone to a wide variety of vulnerabilities, including arbitrary file uploads, local file inclusion, SQL injection, and cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
DSA-351 php4 - cross-site scripting
Bulletin has no description...
[SECURITY] [DSA-341-1] New liece packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 341-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 7th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-343-1] New skk, ddskk packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 343-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...
DSA-342 mozart - unsafe mailcap configuration
Bulletin has no description...
[Full-Disclosure] iDEFENSE Security Advisory 07.01.03: Caché Insecure Installation File and Directory Permissions
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 07.01.03: http://www.idefense.com/advisory/07.01.03.txt Cach Insecure Installation File and Directory Permissions July 1, 2003 I. BACKGROUND InterSystems Corp.’s Cach is a post-relational database for e-applications that is...
Important: Red Hat Security Advisory: : : : Updated gaim client fixes vulnerabilities
Updated gaim packages that fix a number of vulnerabilities are now available for Red Hat Linux on IBM iSeries and pSeries systems. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prior to...
DSA-326 orville-write - buffer overflows
Bulletin has no description...
phpBB viewtopic.php topic_id Parameter SQL Injection
There is a flaw in the version of phpBB hosted on the remote web server that may allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host or to obtain the MD5 hash of the password of any user. %NASLMINLEVEL 70300 C Tenable Network...
eLDAPo index.php Plaintext Password Disclosure
The remote host is hosting eLDAPo, a PHP-based CGI suite designed to perform LDAP queries. This application stores the passwords to the LDAP server in plaintext in its source file. An attacker can read the source code of index.php and use the information contained to gain credentials on a...
SquirrelMail Multiple Remote Vulnerabilities
The remote host is running SquirrelMail, a web-based mail server. There is a flaw in the remote installation that could allow an attacker with a valid webmail account to read, move and delete arbitrary files on this server, with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable...
PT-2003-1619 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue is related to a problem in the DCERPC DCE/RPC dissector, allowing remote attackers to cause a denial of service by consuming memory via a certain NDR string. Recommendations: For...
SRT2003-06-12-0853 - ike-scan local root format string issue
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
SRT2003-06-12-1212 - FakeBO syslog() format string issue.
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
Lotus Domino /./ Request Database Locking DoS
It might be possible to lock out some Lotus Domino databases by requesting them through the web interface with a special request containing a '/./' string in the URL path. This attack is only efficient on databases that are not used by the server. Note that no real attack was performed, so this m...