Mandriva Update for drakx-net MDVA-2008:002 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:002 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for fluxbox MDVA-2008:032-1 (fluxbox)

Check for the Version of fluxbox OpenVAS Vulnerability Test Mandriva Update for fluxbox MDVA-2008:032-1 fluxbox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Download connection

Added: 03/18/2009 Background This tool allows you to download a file which, when executed, establishes a command connection. Limitations This tool requires a user to execute the downloaded file in order to succeed. The target field must be a licensed target but is unused. Platforms Windows Linux...

CentOS Update for php CESA-2008:0546-01 centos2 i386

Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2008:0546-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities

The remote Barracuda Spam Firewall device is using a firmware version prior to version 3.5.12.007. It is, therefore, reportedly affected by several issues : - There is a remote SQL injection vulnerability involving the 'patternx' parameter where x=0...n of the 'cgi-bin/index.cgi' script when...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP04 security update

Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix various security issues are now available for Red Hat Enterprise Linux 5 as JBEAP 4.2.0.CP04. This update has been rated as having low security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password...

Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.16.b09.fc9 (2008-6439)

Tue Jul 8 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Only apply hotspot security patch of jitarches. - Wed Jul 2 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Added OpenJDK security patches. - Sat Jun 7 2008 Tom 'spot' Callaway - 1:1.6.0-0.16.b09 - enable sparc/sparc64 builds - Sat May 31 2008 Thomas...

Mozilla Firefox 2.0 - 'chrome://' URI JavaScript File Request Information Disclosure

source: https://www.securityfocus.com/bid/27406/info Mozilla Firefox is prone to an information-disclosure vulnerability because it fails to restrict access to local JavaScript, images and stylesheets files. Attackers can exploit this issue to gain access to potentially sensitive information that...

Important: flac security update

1.1.0-7.el4.2 - Add RHEL-5 patch to remove execstack requirement Related: rhbz 332591 1.1.0-7.el4.1 - Add patch from Takashi Iwai to fix CVE-2007-4619 Resolves: rhbz 332591...

Important: hplip security update

1.6.7-4.1.el50.3 - Fixed post scriptlet to make sure it restarts the daemon on upgrade part of bug 320011. 1.6.7-4.1.el50.2 - Build requires openssl-devel part of bug 320011. 1.6.7-4.1.el50.1 - Applied patch to fix CVE-2007-5208 bug 320011...

CVE-2007-4569

CVE-2007-4569 affects KDE kdebase (KDM) where autologin combined with “shutdown with password” enables a local attacker to bypass password protection and login to arbitrary accounts. The primary sources tie this to KDE 3.3.0–3.5.7 and describe the login bypass via unspecified vectors; OpenVAS/Nes...

CVE-2007-3455

cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "stored decrypted user logon information."...

CVE-2007-2849

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

Fedora Core 5 : tcpdump-3.9.4-4.fc5 (2007-348)

Thu Mar 15 2007 Miroslav Lichvar - 14:3.9.4-4.fc5 - fix buffer overflow in 802.11 printer 232349, CVE-2007-1218 - require /usr/sbin/sendmail 232363 - Wed Nov 8 2006 Miroslav Lichvar - 14:3.9.4-3.fc5 - fix processing of Prism and AVS headers 207435 - fix arp2ethers script - update ethercodes.dat...

Fedora Core 5 : thunderbird-1.5.0.10-1.fc5 (2007-309)

Thu Mar 1 2007 Martin Stransky 1.5.0.10-1 - Update to 1.5.0.10 - Tue Dec 19 2006 Matthias Clasen 1.5.0.9-2 - Add a Requires: launchmail 219884 - Tue Dec 19 2006 Christopher Aillon 1.5.0.9-1 - Update to 1.5.0.9 - Take firefox's pango fixes - Don't offer to import...nothing. - Tue Nov 7 2006...

Authentication flaw

avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements...

J-OWAMP Web Interface 2.1b - link Remote File Inclusion

J-OWAMP Web Interface 2.1b - link Remote File Inclusion !/usr/bin/perl Jowamp WebInterface v 2.1 Remote File Inclusion Vulnerablity Vulnerability found & Exploit coded By Dr Max Virus Download:http://www.av.it.pt/jowamp/indexfiles/JOWAMPWebInterfaceversion21.zip User Must Be Logged In! In a web...

hotmailmsnxss.txt

Hotmail/MSN Cross Site Scripting Exploit Author: Simo64 Contact: simo64atmorxdotorg Discovered: 07/25/2006 Published: 08/10/2006 Vendor: MSN.com Service: Hotmail.com Webmail Service Vulnerability: Cross Site Scripting Cookie-Theft Severity: Medium/High Tested on: IE 6.0 designed for firefox 1.5 a...