SuSE-SA:2003:048: gpg

The remote host is missing the patch for the advisory SuSE-SA:2003:048 gpg. The gnupg the SUSE package is named gpg package is the most widely used software for cryptographic encryption/decryption of data. Two independent errors have been found in gpg GnuPG packages as shipped with SUSE products:...

CVE-2004-2047

Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. dot dot in the pathext parameter...

Fedora Core 1 : mailman-2.1.5-6 (2004-167)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

Polar Helpdesk 3.0 - Cookie Based Authentication Bypass

Polar Helpdesk 3.0 - Cookie Based Authentication Bypass source: https://www.securityfocus.com/bid/10775/info Polar Helpdesk is reported prone to a cookie based authentication system bypass vulnerability. It is reported that the authentication and privilege system for Polar Helpdesk is based...

[Full-Disclosure] iDEFENSE Security Advisory 07.01.04: WinGate Information Disclosure Vulnerability

WinGate Information Disclosure Vulnerability iDEFENSE Security Advisory 07.01.04 www.idefense.com/application/poi/display?id=113&type=vulnerabilities July 01, 2004 I. BACKGROUND WinGate is an Internet sharing and proxy application that allows for monitoring and remote administration. More...

[Full-Disclosure] Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)

Arhont Ltd. - Information Security Arhont Advisory by: Konstantin Gavrilenko http://www.arhont.com Advisory: cleartext account password obtainable using SNMP Class: design/configuration bug Test platform: BT Voyager 2000 Wireless ADSL Router Vendor Contact Date: 10/06/2004 PD release date:...

Non-logged Brute Force Attack Vulnerability for Fantastico-Created Databases on cPanel Based Hosts

Advisory: cPanel/Fantastico/mysql local vulnerability Date: 5/19/04 By: Michael Curtis email at curto dot us System: Redhat Enterprise 3 ES / cPanel 9.3.0-R5 most likely all redhat versions with all cpanel versions Severity: High, full compromise of local databases, password retrieval Background:...

Выложите везде где можно мой Remote exploit for Manlix scripts (x).(x).(x)

?php / ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++Hacked and coded by russian hacker: tristramCCteam ++ ++Uin: 656555 ++ ++WEB: http://ccteam.org ++ ++ ++ ++Remote exploit for Manlix scripts x.x.x ++ ++Date: 8.05.2004 ++ ++Usage:...

Business Objects Crystal Reports 9/10 Web Form Viewer - Directory Traversal

source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files, allowing for information disclosure and denial of service attacks. An attacke...

[NT] SurgeLDAP Web Service user.cgi File Retrieval

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVS Client Traversal Arbitrary File Retrieval

According to its version number, the remote CVS server has a directory directory traversal vulnerability. This could allow a malicious client to read files outside of the CVS root. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12212; scriptversion "1.16";...

SurgeLDAP10.txt

SurgeLDAP 1.0g Web service user.cgi File retrieval Release Date: April 13, 2004 Severity: Low Vendor: http://netwinsite.com Details: SurgeLDAP is an advanced easy to manage and install high performance LDAP v3 server. It supports any number of schemas, easy to add/modify existing schemas,...

NUL Character in message body locks up Outlook/Outlook Express

Hello, A number of Microsoft mail programs fail when they attempt to download a message containing ASCII NUL in the message body. The clients we tested are: Outlook Express 6.00.2800.1106 Outlook 2002 10.2627.3501 SP-1 Outlook 2003 11.5608.5606 Once the client attempts to download the particular...

ADA IMGSVR 0.4 - Arbitrary File Download

ADA IMGSVR 0.4 - Arbitrary File Download source: https://www.securityfocus.com/bid/10027/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the retrieve arbitrary files from the web server root directory and any subdirectories therein. An attacker...

CVE-2004-1870

Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the 1 photo parameter to addfav.php, 2 photo parameter to comments.php, 3 credit parameter to comments.php, 4 cat parameter to index.php, 5 ppuser parameter to...

CVE-2004-0327

Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. dot dot sequences in the clang parameter...

CVE-2004-0293

Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. dot dot in a HTTP request to 1 gotopage.cgi or 2 genindexpage.cgi...

CVE-2004-0303

Summary: OWLS 1.0 in OWL's Workshop is vulnerable to a remote file disclosure. An attacker can cause the application to disclose arbitrary files by supplying absolute pathnames through specific parameters: the file parameter in /glossaries/index.php, the filename parameter in /readings/index.php,...

MSN Messenger unauthorized access

Any file from client computer can be retrieved...

[UNIX] phpNewsManager Directory Travarsal

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...