CVE-2010-3324

The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scriptin...

Ubuntu Update for mountall vulnerability USN-985-1

Ubuntu Update for Linux kernel vulnerabilities USN-985-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9851.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for mountall vulnerability USN-985-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

[USN-985-1] mountall vulnerability

=========================================================== Ubuntu Security Notice USN-985-1 September 08, 2010 mountall vulnerability CVE-2010-2961 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.04 LTS This advisory...

mountall privilege escalation

udev rule file unsafe permissions...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

WMI Firewall Rule Enumeration

Binary data wmienumfirewallrules.nbin...

Outlook Web Access 2003 Cross Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

IT-Grundschutz: List reject Rule on Cisco Voip Devices over Telnet

This plugin list reject Rule on Cisco Voip Devices over Telnet. To use this test, you must configure Username and password for this test in the preferences. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Snort Back Orifice BOPing (CVE-1999-0660)

Snort is an open source network intrusion detection system IDS capable of analyzing network traffic, logging, and dropping individual packets based on user defined rules. The program applies user defined rules to received network traffic in order to detect potentially malicious traffic. Snort is...

[SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2040-1 [email protected] http://www.debian.org/security/ Sébastien Delafond May 02, 2010 http://www.debian.org/security/faq -...

DSA-2040-1 squidguard - several vulnerabilities

Bulletin has no description...

Mining Firewall Traffic for Better Net Security

Researchers at the Univeristy of Texas at Dallas have developed a method for analyzing the activity log files of corporate firewalls. Their analysis can determine what rules the firewall is actually applying to incoming and outgoing network traffic and then compare these with the original rules t...

Asterisk CIDR Notation in Access Rule Remote Security Bypass Vulnerability (AST-2010-003)

Asterisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

RHEL 4 : HelixPlayer (RHSA-2010:0094)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0094 advisory. - HelixPlayer / RealPlayer: GIF file heap overflow CVE-2009-4242 - HelixPlayer / RealPlayer: compressed GIF heap overflow CVE-2009-4245 -...

Mandriva Update for spamassassin MDVA-2010:014 (spamassassin)

Check for the Version of spamassassin OpenVAS Vulnerability Test Mandriva Update for spamassassin MDVA-2010:014 spamassassin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

MDVA-2010:014 : spamassassin

A bug was discovered in the FHDATEPAST20XX rules that affects vanilla spamassassin 3.2 installations after the first of January 2010 aka. the y2k10 rule bug. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Win32 XP SP3 addFirewallRule

Win32 XP SP3 addFirewallRule. Shellcode exploit for win32 platform ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will create a XP firewall rule to allow TCP traffic on port 445. ; Make sure ADVAPI32.dll is loaded. BITS 32 global start start:...

Win32 XP SP3 addFirewallRule

No description provided by source. ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will create a XP firewall rule to allow TCP traffic on port 445. ; Make sure ADVAPI32.dll is loaded. BITS 32 global start start: ;for the handle xor edx, edx mov...

CentOS 4 : kernel (CESA-2009:1671)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1671 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...