1885 matches found
Debian DSA-764-1 : cacti - several vulnerabilities
Several vulnerabilities have been discovered in cacti, a round-robin database RRD tool that helps create graphs from database information. The Common Vulnerabilities and Exposures Project identifies the following problems : - CAN-2005-1524 Maciej Piotr Falkiewicz and an anonymous researcher...
Debian DSA-762-1 : affix - several vulnerabilities
Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-2250 A buffer overflow allows remote attackers to...
FreeBSD : mozilla -- scripting vulnerabilities (b2e6d1d6-1339-11d9-bc4a-000c41e2cdad)
Several scripting vulnerabilities were discovered and corrected in Mozilla : CVE-2004-0905 JavaScript; links dragged onto another frame or page allows an attacker to steal or modify sensitive information from other sites. The user could be convinced to drag obscurred links in the context of a gam...
phpBB < 2.0.17 Nested BBCode URL Tags XSS
Binary data 3051.prm...
WordPress < 1.5.1 Multiple Vulnerabilities
The version of WordPress installed on the remote host is affected by multiple vulnerabilities : - The application is affected by a SQL injection vulnerability because it fails to properly sanitize user-supplied input passed via the 'tbid' parameter to the 'wp-trackback.php' script before using it...
Debian DSA-713-1 : junkbuster - several vulnerabilities
Several bugs have been found in junkbuster, a HTTP proxy and filter. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1108 James Ranson discovered that an attacker can modify the referrer setting with a carefully crafted URL by accidentally...
Mailreader network.cgi enriched/richtext MIME Message XSS
According to its banner, the version of Mailreader installed on the remote host is affected by a remote HTML injection vulnerability due to its failure to properly sanitize messages using a 'text/enriched' or 'text/richtext' MIME type. An attacker can exploit this flaw by sending a specially...
dnsmasq < 2.21.0 Multiple Remote Vulnerabilities
The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...
dnsmasq < 2.21 Multiple Remote Vulnerabilities
Binary data 2771.prm...
[ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability
Positive Technologies SA-20050322 Phorum "location" HTTP Response Splitting Vulnerability. Release Date: 03/22/2005 Date Reported: 03/10/2005 Severity: Medium Application: Phorum Platform: PHP Vendor: http://www.phorum.org Affects versions: 5.0.14a Other versions may also be affected. I. BACKGROU...
paNews 2.0.4b Multiple Input Validation Vulnerabilities
The remote host is running a version of paNews that suffers from the following vulnerabilities: - SQL Injection Issue in the 'login' method of includes/auth.php. A remote attacker can leverage this vulnerability to add users with arbitrary privileges. - Local Script Injection Vulnerability in...
Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities (deprecated)
Binary data 2703.prm...
CA License Service Detection
Binary data 2690.prm...
Sun WebServer Detection
Binary data 2677.prm...
PHPNews < 1.2.5 auth.php path Parameter Remote File Inclusion
Binary data 2665.prm...
CVE-2005-0604
lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials...
CVE-2005-0604
CVE-2005-0604 affects lnss.exe in GFI Languard Network Security Scanner 5.0 . The vulnerability is that the program stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. This is the stated impact in the records,...
phpBB < 2.0.13 Cookie Authentication Bypass
Binary data 2658.prm...
[Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage
February 28, 2005 Hat-Squad Advisory: GFI L.N.S.S 5.0- Insecure Credential Storage Product: GFI Languard Network Security Scanner Vendor Url: http://gfi.com/ Version: 5.0 Vulnerability: Insecure Credential Storage Release Date: February 28, 2005 Vendor Status: Informed on 22 February 2005 Respons...
News Server (NNTP) Anonymous Read / Write Access
The remote server seems open to remote users. Some people prefer open public NNTP servers to be able to read or post articles anonymously. Unwanted connections could waste your bandwidth or put you into legal trouble if a malicious person were to use your server to post abusive articles. Keep in...