Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

Mozilla Firefox < 1.0.2 Multiple Vulnerabilities

Binary data 2704.prm...

CA License Service Multiple Vulnerabilities

The remote host is running the Computer Associate License Application. The remote version of this software is vulnerable to several flaws that could allow a remote attacker to execute arbitrary code on the remote host with SYSTEM privileges. C KK Liu Changes by Tenable: - Fixed the request -...

RHEL 4 : firefox (RHSA-2005:176)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:176 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is able to...

RealPlayer Multiple Remote Overflows (2005-03-01)

According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows might allow an attacker to execute arbitrary code and delete arbitrary files on the remote host. To exploit these flaws, an attacker would send a malformed SMIL or WAV file to a...

cycladesReveal.txt

The Cyclades AlterPath Manager APM Console Server is sold to "perform secure remote management of IT assets from anywhere in the world." It provides individual user logins, and allows the APM administrator to restrict users to specific consoles. However, a basic review of the APM management web...

[Full-Disclosure] Cyclades AlterPath Manager Vulnerabilities

The Cyclades AlterPath Manager APM Console Server is sold to "perform secure remote management of IT assets from anywhere in the world." It provides individual user logins, and allows the APM administrator to restrict users to specific consoles. However, a basic review of the APM management web...

zk-mercuryboard.txt

============================================================================== Zeelock-2005 ============================================================================== M E C U R Y B O A R D Critical SQL Injection - Working Exploit...

RHEL 4 : kernel (RHSA-2005:092)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:092 advisory. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues: iSEC Security...

CVE-2005-0463

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in 1 host.php, 2 port.php, and 3 index.php...

CVE-2005-0463

The CVE-2005-0463 entry pertains to Ulog-php before v1.0 with probable SQL injection flaws due to input validation issues in (1) host.php, (2) port.php, and (3) index.php. Public data provide no confirmed impact or exploit details. CVSS suggests HIGH severity (7.5), but explicit exploitation stat...

Low: Red Hat Security Advisory: enscript security update

An updated enscript package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU enscript converts ASCII files to PostScript. Enscript has the ability to interpret...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...

RHEL 3 : kernel (RHSA-2005:043)

Updated kernel packages that fix several security issues in Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues : iSEC Security Research discovered a VMA handling flaw in the...

CVE-2004-1559

Multiple cross-site scripting XSS vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 redirectto, text, popupurl, or popuptitle parameters to wp-login.php, 2 redirecturl parameter to admin-header.php, 3 popuptitle, popupurl, content, or posttit...

RHEL 3 : XFree86 (RHSA-2004:612)

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 3. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs such as GNOME and K...

Multiple XSS Vulnerabilities in Wordpress 1.2.1

Vendor : Wordpress URL : http://wordpress.org/ Version: Wordpress 1.2.1 Risk: : XSS Description WordPress is a state-of-the-art semantic personal publishing platform with a focus on aesthetics, web standards, and usability. ... Visit http://wordpress.org/ for detailed informations. Summary After ...

cups-lpr -- lppasswd multiple vulnerabilities

D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of CUPS. In the following excerpt from Bernstein's email, CVE names have been added for each issue: First, lppasswd blithely ignores write errors in fputsline,outfile at lines...

waraxe-2004-SA038.txt

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...