Computer Associates BrightStor ARCserve Backup Tape Engine fails to properly handle RPC requests

Overview A vulnerability exists in the Computer Associates BrightStor ARCserve Backup Tape Engine. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code. Description BrightStor ARCserve Backup is a backup and data retention tool that integrates with...

PT-2006-6665 · My-Bic · My-Bic

Name of the Vulnerable Software and Affected Versions: My-BIC version 0.6.5 Description: A remote file inclusion issue in mybic server.php allows remote attackers to execute arbitrary PHP code via a URL in the INC PATH parameter. This issue is disputed by third-party researchers because INC PATH ...

NaviCOPA Web Server fails to properly handle certain HTTP requests

Overview A vulnerability exists in the NaviCOPA Web Server. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code. Description NaviCOPA Web Server is an HTTP server that is available for multiple versions of Microsoft Windows including Windows 98, NT, 2000,...

PT-2006-6566 · @Cid · @Cid Stats

Name of the Vulnerable Software and Affected Versions: @cid stats version 2.3 Description: A remote file inclusion issue in install.php3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. Note that this issue has been disputed by a third party, who claims...

OpenSSH contains a race condition vulnerability

Overview A race condition vulnerability exists in the OpenSSH daemon. Successful exploitation of this vulnerability may result in a denial-of-service condition. Description OpenSSH is an open source client and server implementation of the Secure Shell SSH protocol.The OpenSSH server includes the...

Microsoft PGM vulnerable to remote code execution

Overview A buffer overflow vulnerability in Microsoft's Pragmatic General Multicast PGM protocol implementation may allow an attacker to execute arbitrary code. Description The Pragmatic General Multicast PGM protocol is an experimental protocol defined in RFC 3208. Microsoft's implementation of...

PT-2006-4995 · Mywebland · Mywebland Minibloggie

Name of the Vulnerable Software and Affected Versions: myWebland miniBloggie versions 1.0 and earlier Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the fname parameter in the cls fast template.php file. However, another researcher was unable...

Microsoft Windows Server service buffer overflow

Overview A stack-based buffer overflow exists in the Microsoft Server service. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description Microsoft Server ServiceMS06-040 includes the following information: The Server service...

PT-2006-4419 · Invision · Invision Power Board

Name of the Vulnerable Software and Affected Versions: Invision Power Board version 1.3 Final Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is allegedly possible via the CODE parameter in certain actions in...

PT-2006-4252 · Phpsysinfo · Phpsysinfo

Name of the Vulnerable Software and Affected Versions: phpSysInfo versions 2.5.1 through 3.2.4 Description: The issue allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter. This will display a different...

PT-2006-4031 · Nucleus · Nucleus

Name of the Vulnerable Software and Affected Versions: Nucleus version 3.23 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL using the DIR LIBS parameter in various files, including path/action.php, media.php, /xmlrpc/server.php, and /xmlrpc/api...

PT-2006-3946 · Codewalkers · Ltwcalendar

Name of the Vulnerable Software and Affected Versions: Codewalkers Ltwcalendar version 4.1.3 Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the ltw configinclude dir parameter in the Ltwcalendar/calendar.php file. However, it is noted that th...

Linux Kernel may fail to properly handle SNMP packets

Overview A memory freeing vulnerability in the Linux kernel module ipnatsnmpbasic can be exploited to create a denial-of-service condition. Description ipnatsnmpbasic The ipnatsnmpbasic IP NAT module is intended for use with SNMP network discovery and monitoring applications where target networks...

PT-2006-3771

Name of the Vulnerable Software and Affected Versions Realty Portal version 5.1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the cat parameter in the content.php file. Recommendations For Realty Portal...

TIBCO Rendezvous daemon components contain a buffer overflow in the HTTP administrative interface

Overview A vulnerability in the TIBCO Rendezvous daemon components may allow a remote attacker to execute arbitrary code on an affected system. Description TIBCO Rendezvous is a distributed messaging software platform. A buffer overflow vulnerability has been discovered in the HTTP administrative...

PT-2006-3421 · Openwiki · Openwiki

Name of the Vulnerable Software and Affected Versions: OpenWiki version 0.78 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter in the ow.asp file. This issue has been disputed by the vendor, who claims that code...

EMC Retrospect Client buffer overflow vulnerability

Overview EMC Retrospect Client contains a buffer overflow. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description EMC Retrospect Backup and Recovery Software EMC Retrospect is a is a backup and recovery application designed for small to medium...

[SA19869] Linux Kernel SMBFS chroot Directory Traversal Vulnerability

TITLE: Linux Kernel SMBFS chroot Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19869 VERIFY ADVISORY: http://secunia.com/advisories/19869/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/...

TFTP File Detection (HP Ignite-UX passwd) - Active Check

The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

PT-2006-2106 · Apache +1 · Htpasswd +1

Name of the Vulnerable Software and Affected Versions: Acme thttpd version 2.25b htpasswd affected versions not specified Description: Multiple buffer overflows in htpasswd might allow local users to gain privileges via a long command line argument and a long line in a file. This issue is...