1971 matches found
Solaris 10 (sparc) : 120719-07 (deprecated)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Gzip. Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update,...
Interchange < 5.2.1 Multiple Injection Vulnerabilities
Binary data 3241.prm...
Fedora Core 3 : ncpfs-2.2.4-4.FC3.1 (2005-435)
Fri Jun 17 2005 Jiri Ryska 2.2.4-4.FC3.1 - fixed getuid security bug CVE-2005-0014 - fixed security bug CVE-2004-1079 - Mon Apr 11 2005 Jiri Ryska 2.2.4-4.FC3 - fixed getuid security bug CVE-2005-0013 Note that Tenable Network Security has extracted the preceding description block directly from...
GLSA-200508-05 : Heartbeat: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200508-05 Heartbeat: Insecure temporary file creation Eric Romang has discovered that Heartbeat insecurely creates temporary files with predictable filenames. Impact : A local attacker could create symbolic links in the temporary...
GoodTech SMTP Server < 5.17 'RCPT TO' Command Remote Overflow (deprecated)
Binary data 3106.prm...
Debian DSA-764-1 : cacti - several vulnerabilities
Several vulnerabilities have been discovered in cacti, a round-robin database RRD tool that helps create graphs from database information. The Common Vulnerabilities and Exposures Project identifies the following problems : - CAN-2005-1524 Maciej Piotr Falkiewicz and an anonymous researcher...
Debian DSA-762-1 : affix - several vulnerabilities
Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-2250 A buffer overflow allows remote attackers to...
FreeBSD : mozilla -- scripting vulnerabilities (b2e6d1d6-1339-11d9-bc4a-000c41e2cdad)
Several scripting vulnerabilities were discovered and corrected in Mozilla : CVE-2004-0905 JavaScript; links dragged onto another frame or page allows an attacker to steal or modify sensitive information from other sites. The user could be convinced to drag obscurred links in the context of a gam...
phpBB < 2.0.17 Nested BBCode URL Tags XSS
Binary data 3051.prm...
WordPress < 1.5.1 Multiple Vulnerabilities
The version of WordPress installed on the remote host is affected by multiple vulnerabilities : - The application is affected by a SQL injection vulnerability because it fails to properly sanitize user-supplied input passed via the 'tbid' parameter to the 'wp-trackback.php' script before using it...
Debian DSA-713-1 : junkbuster - several vulnerabilities
Several bugs have been found in junkbuster, a HTTP proxy and filter. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1108 James Ranson discovered that an attacker can modify the referrer setting with a carefully crafted URL by accidentally...
Mailreader network.cgi enriched/richtext MIME Message XSS
According to its banner, the version of Mailreader installed on the remote host is affected by a remote HTML injection vulnerability due to its failure to properly sanitize messages using a 'text/enriched' or 'text/richtext' MIME type. An attacker can exploit this flaw by sending a specially...
dnsmasq < 2.21.0 Multiple Remote Vulnerabilities
The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...
dnsmasq < 2.21 Multiple Remote Vulnerabilities
Binary data 2771.prm...
[ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability
Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...
paNews 2.0.4b Multiple Input Validation Vulnerabilities
The remote host is running a version of paNews that suffers from the following vulnerabilities: - SQL Injection Issue in the 'login' method of includes/auth.php. A remote attacker can leverage this vulnerability to add users with arbitrary privileges. - Local Script Injection Vulnerability in...
Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities (deprecated)
Binary data 2703.prm...
CA License Service Detection
Binary data 2690.prm...