Security Best Practice: Protect Yourself from Port Scans

A port scanner is a software application designed to probe a network host for open ports. This is often used by administrators to verify security policies of their networks and by attackers to identify running services on a host with the view to compromise it...

HP-UX PHNE_36192 : HP-UX Running ftp, Remote Denial of Service (DoS) (HPSBUX02334 SSRT071403 rev.2)

s700800 11.11 ftpd1M and ftp1 patch : A potential security vulnerability has been identified with HP-UX running ftp. The vulnerability could be exploited remotely to create a Denial of Service DoS. The Denial of Service DoS affects the ftp server application only. %NASLMINLEVEL 70300 C Tenable...

GLSA-200804-10 : Tomcat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-10 Tomcat: Multiple vulnerabilities The following vulnerabilities were reported: Delian Krustev discovered that the JULI logging component does not properly enforce access restrictions, allowing web application to add or...

NX: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Multiple integer overflow and buffer overflow vulnerabilities...

GLSA-200801-22 : PeerCast: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200801-22 PeerCast: Buffer overflow Luigi Auriemma reported a heap-based buffer overflow within the 'handshakeHTTP' function when processing HTTP requests. Impact : A remote attacker could send a specially crafted request to the...

CVE-2008-0258

CVE-2008-0258 affects PHP Running Management (phpRunMan) index.php; it is a Cross-Site Scripting (XSS) vulnerability via the message parameter in versions before 1.0.3. The vulnerability allows remote attackers to inject arbitrary script/HTML, with no authentication required (CVSS v2 base score 4...

CVE-2008-0258

Cross-site scripting XSS vulnerability in index.php in PHP Running Management phpRunMan before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PHP Running Management 1.0.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27268/info PHP Running Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

[security bulletin] HPSBUX02294 SSRT071451 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01294212 Version: 1 HPSBUX02294 SSRT071451 rev.1 - HP-UX Running DCE, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

SuSE 10 Security Update : cron (ZYPP Patch Number 3093)

By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

Debian DSA-1421-1 : wesnoth - directory traversal

A vulnerability has been discovered in Battle for Wesnoth that allows remote attackers to read arbitrary files the user running the client has access to on the machine running the game client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

perl -- regular expressions unicode data buffer overflow

Red Hat reports: A flaw was found in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, possibly resulting in arbitrary code running with the permissions of the user running Perl...

USN-526-1: debian-goodies vulnerability

Thomas de Grenier de Latour discovered that the checkrestart program included in debian-goodies did not correctly handle shell meta-characters. A local attacker could exploit this to gain the privileges of the user running checkrestart...

HP-UX PHCO_36809 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)

s700800 11.11 logins1M cumulative patch : A potential security vulnerability has been identified in HP-UX running the logins1M command. This command incorrectly reports password status. As a result password issues may not be detected, allowing remote unauthorized access. %NASLMINLEVEL 70300 C...

множественные уязвимости в Stride v1.0

Здравствуйте, 3APA3A. Software: Stride v1.0 Content Management System, Merchant, Courses Vendor: www.scottmanktelow.com Vulnerability: множественные уязвимости Risk: высокий Date: 16.09.2007 discovered by durito -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: SQL-инъекции +:| Экплойт |:...

CVE-2007-3912

checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name of the executable file for a running process...

PhpWiki: Remote execution of arbitrary code

Background PhpWiki is an open source content management system written in PHP. Description Harold Hallikainen has reported that the Upload page fails to properly check the extension of a file. Impact A remote attacker could upload a specially crafted PHP file to the vulnerable server, resulting i...

America Online ICQ ActiveX Control Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of AOL ICQ. User interaction is not required to exploit this vulnerability. The specific flaw exists in the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control with the following CLSID:...

On the Windows System to achieve the DDOS attack-vulnerability warning-the black bar safety net

First said we used to attack the client and server method of configuration, using the moment the most famous of REDHAT LINUX for testing, the present attack test I'm using FEDORA CORE3, the software is the most famousDDOSattack tool TFN2K LINUX Edition, is to attack the WINDOWS Server system is...

HP-UX PHSS_35434 : HP-UX Running dtmail, Local Execution of Arbitrary Code (HPSBUX02162 SSRT061223 rev.1)

s700800 11.11 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running dtmail. The vulnerability could be exploited by a local, authorized user to execute arbitrary code as a member of the 'mail' group. References: NETRAGARD-20060810. %NASLMINLEVEL 70300 ...