Fedora Core 3 : devhelp-0.9.2-2.3.5 (2005-618)

Devhelp is an API document browser for the GNOME environment. There were several security flaws found in the mozilla package, which devhelp depends on. Users of devhelp are advised to upgrade to this updated package which has been rebuilt against a version of mozilla not vulnerable to these flaws...

Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication

Overview A vulnerability in Cisco IOS Easy VPN Server may allow unauthorized users to complete XAUTH authentication and potentially access private network resources. Description Easy VPN Server Cisco IOS Easy VPN Server allows an IOS device to function as a VPN concentrator, providing...

Fedora Core 2 : telnet-0.17-28.FC2.1 (2005-277)

Two buffer overflow flaws were discovered in the way the telnet client handles messages from a server. An attacker may be able to execute arbitrary code on a victim's machine if the victim can be tricked into connecting to a malicious telnet server. The Common Vulnerabilities and Exposures projec...

CVE-2005-0463

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in 1 host.php, 2 port.php, and 3 index.php...

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

XAMPP < 1.4.14 Multiple Vulnerabilities

The remote host is running XAMPP, an Apache distribution containing MySQL, PHP, and Perl. It is designed for easy installation and administration. The remote version of this software contains security flaws and password disclosure weaknesses that could allow an attacker to perform cross-site...

ModernBill < 4.3.3 Multiple Vulnerabilities

Binary data 2812.prm...

Multipe flaws in Koobi CMS 4.2.3

Talte Security Advisory 2 Product: Koobi CMS 4.2.3 and maybe other versions Homepage: http://www.dream4.de/ Risk: medium Type: path disclosure, xss, possible sql injections Bug Found by mircia [email protected] Page: http://security.talte.net greets to Lithuania ; Koobi is nice and it loo...

-==CoolForum Path Disclosure & Possible SQL Injection==-

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 11 - 20/03/05 -------------------------------------------------------- Program: CoolForum Homepage: http://coolforum.net/ Vulnerable Versions: CoolForum v.0.8.1 beta & Lowers Risk: Low!! Impact: Path...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

Mozilla Firefox < 1.0.2 Multiple Vulnerabilities

Binary data 2704.prm...

CA License Service Multiple Vulnerabilities

The remote host is running the Computer Associate License Application. The remote version of this software is vulnerable to several flaws that could allow a remote attacker to execute arbitrary code on the remote host with SYSTEM privileges. C KK Liu Changes by Tenable: - Fixed the request -...

RealPlayer Multiple Remote Overflows (2005-03-01)

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows might allow an attacker to execute arbitrary code and delete arbitrary files on the remote host. To exploit these flaws, an attacker would send a malformed SMIL or WAV file to a...

RHEL 4 : firefox (RHSA-2005:176)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:176 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is able to...

cycladesReveal.txt

The Cyclades AlterPath Manager APM Console Server is sold to "perform secure remote management of IT assets from anywhere in the world." It provides individual user logins, and allows the APM administrator to restrict users to specific consoles. However, a basic review of the APM management web...

[Full-Disclosure] Cyclades AlterPath Manager Vulnerabilities

The Cyclades AlterPath Manager APM Console Server is sold to "perform secure remote management of IT assets from anywhere in the world." It provides individual user logins, and allows the APM administrator to restrict users to specific consoles. However, a basic review of the APM management web...

zk-mercuryboard.txt

============================================================================== Zeelock-2005 ============================================================================== M E C U R Y B O A R D Critical SQL Injection - Working Exploit...

RHEL 4 : kernel (RHSA-2005:092)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:092 advisory. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues: iSEC Security...

CVE-2005-0463

The CVE-2005-0463 entry pertains to Ulog-php before v1.0 with probable SQL injection flaws due to input validation issues in (1) host.php, (2) port.php, and (3) index.php. Public data provide no confirmed impact or exploit details. CVSS suggests HIGH severity (7.5), but explicit exploitation stat...

CVE-2005-0463

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in 1 host.php, 2 port.php, and 3 index.php...