Gentoo Security Advisory GLSA 200511-04 (clamav)

The remote host is missing updates announced in advisory GLSA 200511-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

omcd-xssxsrf.txt

======================================================================= . .. | | / / | | | | / \ / / /\ / / \ | | | / / \ /\ \| | / // / /\ \ / / / // http://wwwlowsec.org ======================================================================== Author: C1c4Tr1Z Date: 28/08/08...

onenews-sqlxss.txt

///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke ========================== |1...

apache -- multiple vulnerabilities

Apache HTTP server project reports: The following potential security flaws are addressed: CVE-2008-2364: modproxyhttp: Better handling of excessive interim responses from origin server to prevent potential denial of service and high memory usage. Reported by Ryujiro Shibuya. CVE-2007-6420:...

CentOS 3 / 4 / 5 : net-snmp (CESA-2008:0529)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a protocol used for network managemen...

easycms-multi.txt

--==+================================================================================+==-- --==+ easyCMS 0.2 allows a simple sql statement to be inserted into the cookie bypassing the admin login. see below for the vulnerabilitys. SQL Injection version = 0.2: javascript:document.cookie = "user=' ...

youtubeclone-exec.txt

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

openSUSE 10 Security Update : flash-player (flash-player-5161)

This flash player update to version 9.0.124.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-5275, CVE-2007-6243, CVE-2007-6637, CVE-2007-6019, CVE-2007-0071, CVE-2008-1655,...

Fedora 7 : openldap-2.3.34-7.fc7 (2008-1616)

Fri Feb 8 2008 Jan Safranek 2.3.34-7 - fix CVE-2008-0658 432012 - Tue Feb 5 2008 Jan Safranek 2.3.34-6 - fix CVE-2007-6698 431409 - Mon Jan 14 2008 Jan Safranek 2.3.34-5 - fix default slurpd directory to /var/lib/ldap 424831 - Fri Nov 2 2007 Jan Safranek 2.3.34-4 - fix various security flaws...

Fedora 8 : openldap-2.3.39-3.fc8 (2008-1568)

Fri Feb 8 2008 Jan Safranek 2.3.39-2 - fix CVE-2008-0658 432013 - Mon Jan 14 2008 Jan Safranek 2.3.39-2 - fix default slurpd directory to /var/lib/ldap 424831 - Fri Nov 2 2007 Jan Safranek 2.3.39-1 - new upstream version, fixing few security flaws 362991 Note that Tenable Network Security has...

PHP RPG - Sql Injection and Session Information Disclosure.

By Michael Brooks Vulneralbity: Sql Injection and Session Information Disclosure. Homepage:http://sourceforge.net/projects/phprpg/ Verison affected 0.8.0 There are two flaws that affect this applcation. A nearly vinnella login bypass issues affects phprpg. If magicqutoesgpc=off then this will log...

Design/Logic Flaw

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

RHEL 5 : pam (RHSA-2007:0555)

Updated pam packages that fix two security flaws, resolve several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

RHEL 5 : pcre (RHSA-2007:0967)

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

WWWISIS <= 7.1 (IsisScript) Local File Disclosure / XSS Vulnerabilities

No description provided by source. WWWISIS Search Multiple Vulnerabilities Download: http://bvsmodelo.bvsalud.org/php/level.php?lang=en&component=31&item=2 Bug found by JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com d0rk: powered by WWWISIS Stop lammer Local...

RHEL 4 / 5 : kdelibs (RHSA-2007:0909)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0909 advisory. The kdelibs package provides libraries for the K Desktop Environment KDE. Two cross-site-scripting flaws were found in the way Konqueror...

CVE-2004-2707

Technical details about CVE-2004-2707 are not provided in the supplied documents; no specifics on affected versions, impact, or exploitation are available here. Monitor for updates.

RHEL 5 : nfs-utils-lib (RHSA-2007:0951)

An updated nfs-utils-lib package to correct two security flaws is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support libraries that are needed by the command...

SimpGB version 1.46.02 Information Disclosure Vulnerability

netVigilance Security Advisory 66 SimpGB version 1.46.02 Information Disclosure Vulnerability Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...

apache -- multiple vulnerabilities

Apache HTTP server project reports: The following potential security flaws are addressed: CVE-2007-3847: modproxy: Prevent reading past the end of a buffer when parsing date-related headers. CVE-2007-1863: modcache: Prevent a segmentation fault if attributes are listed in a Cache-Control header...