1684 matches found
CentOS 3 : xscreensaver (CESA-2006:0498)
An updated xscreensaver package that fixes two security flaws is now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. A keyboard focus flaw was found...
CentOS 3 / 4 : ethereal (CESA-2005:687)
Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...
Hiding Threads from User-mode
Hiding Threads from User-mode KAV's errors with hooking do not end with NtOpenProcess, however. One of the system services KAV hooks is NtQuerySystemInformation. This routine's behavior is modified to sometimes truncate a thread listing from certain processes when the SystemProcessesAndThreads...
RHEL 2.1 / 3 : xscreensaver (RHSA-2006:0498)
An updated xscreensaver package that fixes two security flaws is now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. A keyboard focus flaw was found...
RHEL 4 : libtiff (RHSA-2006:0425)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2006:0425 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. An integer overflow...
Simplog <= 0.9.2 Multiple Vulnerabilities
The remote host is running Simplog, an open source blogging tool written in PHP. The version of Simplog installed on the remote host fails to sanitize input to the 's' parameter of the 'doc/index.php' script before using it in a PHP 'include' function. Provided PHP's 'registerglobals' setting is...
PHP Live Helper Multiple Remote File Inclusions
The remote host is running PHP Help Live, a commercial web-based real-time help tool written using PHP and MySQL. The version of PHP Help Live installed on the remote host fails to sanitize input to the 'abspath' parameter before using it in various scripts to include files with PHP code. An...
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
nodez 4.6.1.1 mercury - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site:...
Crlf injection
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
PostNuke < 0.762 Multiple Vulnerabilities
The installed version of PostNuke allows an unauthenticated attacker to gain administrative access to select modules through a simple GET request. Additionally, it may be prone to various SQL injection injection or cross-site scripting attacks as well as unspecified attacks through the Languages...
Bugs/Security issues with PatchLink's Update Server
Security Focus, I have been reporting issues to PatchLink Support for two years now with little & no resolution on most of the things I find. Because they are such a large patch management platform I think it is important that they be responsible for their coding practices. But even trying to wor...
BuHa-7.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 7 | Feb 14th, 2006 | --------------------------------------------------- | Vendor | Mantis BT | | URL | http://www.mantisbt.org/ | | Version | /manageuserpage.php: GET:...
[VulnWatch] RS-2006-1: Multiple flaws in VHCS 2.x
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================== - RS-Labs Security Advisory - =============================== Tittle: Multiple flaws in VHCS 2.x ID: RS-2006-1 Severity: Critical Date: 11.Feb.2006 Author: Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt [email protected]...
[Full-disclosure] Cross Site Cooking
Why, yes, I came up with the name, and had to find some bugs to be able to post this. Summary ------- There are three fairly interesting flaws in how HTTP cookies were designed and later implemented in various browsers; these shortcomings make it possible and alarmingly easy for malicious sites t...
googleProxy.txt
This document can be found online at: - http://metasploit.com/research/vulns/googleproxystylesheet/ Title: Google Search Appliance proxystylesheet Flaws Release Date: November 21, 2005 Patch Date: August 16, 2005 Reported Date: June 10, 2005 Vendor: Google Systems Affected: Google Mini Search...
ClamAV: Multiple vulnerabilities
Background ClamAV is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. ClamAV also provides a command line scanner and a tool for fetching updates of the virus database. Description ClamAV has multiple security flaws: a boundary check was perform...
Kibuv worm detection
A fake FTP server was installed by the KIBUV.B worm on this port. This worm uses known security flaws to infect the system. This machine may already be a SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
JRun Sample Files
This host is running the Allaire JRun web server and has sample files installed. Several of the sample files that come with JRun contain serious security flaws. An attacker can use these scripts to relay web requests from this machine to another one or view sensitive configuration information...
Kibuv worm detection
A fake FTP server was installed by the KIBUV.B worm on this port. This worm uses known security flaws to infect the system. This machine may already be a 'zombi' used by crackers to perform distributed denial of service...
Allaire/Macromedia JRun Sample Files (HTTP) - Active Check
This host is running the Allaire JRun web server and has sample files installed. SPDX-FileCopyrightText: 2001 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...