4366 matches found
GLSA-200410-20 : Xpdf, CUPS: Multiple integer overflows
The remote host is affected by the vulnerability described in GLSA-200410-20 Xpdf, CUPS: Multiple integer overflows Chris Evans discovered multiple integer overflow issues in Xpdf. Impact : An attacker could entice an user to open a specially crafted PDF file, potentially resulting in execution o...
CUPS: Leakage of sensitive information
Background The Common UNIX Printing System CUPS is a cross-platform print spooler. Description When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile. Impact A local user could gain knowledge of sensitive authentication data. Workaround...
GLSA-200410-05 : Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200410-05 Cyrus-SASL: Buffer overflow and SASLPATH vulnerabilities Cyrus-SASL contains a remote buffer overflow in the digestmda5.c file. Additionally, under certain conditions it is possible for a local user to exploit a...
Debian DSA-141-1 : mpack - buffer overflow
Eckehard Berns discovered a buffer overflow in the munpack program which is used for decoding respectively binary files in MIME Multipurpose Internet Mail Extensions format mail messages. If munpack is run on an appropriately malformed email or news article then it will crash, and perhaps can be...
[VulnWatch] OpenBSD radius authentication vulnerability
Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...
Sudoedit can expose file contents
Sudoedit can expose file contents Summary: A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that can give an attacker read permission to a file that would otherwise be unreadable. Sudo versions affected: 1.6.8 only Details: While sudoedit runs the actual editor as the...
star fails to set proper permissions on programs specified in RSH environment variable
Overview Star can call external programs specified by the RSH environment variable. This may permit a malicious local user to gain elevated privileges. Description Star is a tape archiving program similar to tar. Star permits the use of storage devices on remote machines via an access program on...
Samba: Remote printing non-vulnerability
Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Due to a bug in the printernotifyinfo function, authorized users could potentially crash their smbd process by sending improperly...
Cisco IOS CEF Packet Information Disclosure (Bug ID CSCdu20643)
Binary data 2213.prm...
GLSA-200405-03 : ClamAV VirusEvent parameter vulnerability
The remote host is affected by the vulnerability described in GLSA-200405-03 ClamAV VirusEvent parameter vulnerability The VirusEvent parameter in the clamav.conf configuration file allows to specify a system command to run whenever a virus is found. This system command can make use of the '%f'...
GLSA-200405-19 : Opera telnet URI handler file creation/truncation vulnerability
The remote host is affected by the vulnerability described in GLSA-200405-19 Opera telnet URI handler file creation/truncation vulnerability The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able t...
DHCP Server Multiple Vulnerabilities (deprecated)
Binary data 1907.prm...
US-CERT Technical Cyber Security Alert TA04-163A -- Cross-Domain Redirect Vulnerability in Internet Explorer
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-163A Cross-Domain Redirect Vulnerability in Internet Explorer Original release date: June 11, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems Overview A cross-domain vulnerability in...
Multiple XSS Vulnerabilities in SquirrelMail
Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP, and can optionally be installed with SQL support. Description Several unspecified cross-site scripting XSS vulnerabilities and a well hidden SQL injection vulnerability were found. An XSS attack allows an...
CVS Server and Client Vulnerabilities
Background CVS, which stands for Concurrent Versions System, is a client/server application which tracks changes to sets of files. It allows multiple users to work concurrently on files, and then merge their changes back into the main tree which can be on a remote system. It also allows branching...
CVS path validation errors
Two programming errors were discovered in which path names handled by CVS were not properly validated. In one case, the CVS client accepts absolute path names from the server when determining which files to update. In another case, the CVS server accepts relative path names from the client when...
Hijacking Apache 2 via mod_perl
Product: modperl Versions: 1.9909 / apache 2.0.47 URL: http://perl.apache.org Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: No Date: 01/21/04 Issue: ====== Modperl under apache 2.0.x leaks critical file descriptors that can be used to takeover hijack th...
Jason Maloney's CGI Guestbook Remote Command Execution Vulnerability.
-= Application =- : Jason Maloney's CGI Guestbook. http://www.aestheticsurgerycenter.com/scripts/guestbook/ -= Versions =- : 3.0 / ALL -= Risk factor =- : High -= Impact =- : Attackers could execute commands remotely. -= Vendor status =- : Vendor notified -= Date =- : 01 December, 2003 -= Credit ...
OpenSSL ASN.1 Parser Multiple Remote DoS
The remote host seems to be running a version of OpenSSL that is older than 0.9.6k or 0.9.7c. There is a heap corruption bug in this version that might be exploited by an attacker to execute arbitrary code on the remote host with the privileges of the remote service. TRUSTED...