Solaris 8 (x86) : 115798-01

CDE 1.4x86: dtspcd Patch. Date this patch was last updated by Sun : Aug/15/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 112237-16

SunOS 5.8: mechkrb5.so.1 and pamkrb5.so.. Date this patch was last updated by Sun : Mar/24/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 110458-02

SunOS 5.8: libcurses patch. Date this patch was last updated by Sun : May/29/01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Red Hat Enterprise Linux fixes

This plugin writes in the knowledge base the CVE ids that we know Red Hat enterprise Linux is not vulnerable to. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription scriptid12512; scriptversion "$Revision: 1.11 $"; scriptcvsdate"$Date: 2011/11/03...

[Squid 2004-OSC2Nuke-001] Inadequate Security Checking in OSC2Nuke

=========================================================================== =========================================================================== Advisory: 2004-OSC2Nuke-001 Affected Software: OSC2Nuke 7x version 1 OSCNukeLite V3.1 and earlier Main Developer: Dreamlite Development Team Modu...

Working Resources BadBlue 1.7.x/2.x - Unauthorized HTS Access

source: https://www.securityfocus.com/bid/7638/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access to administrative functions. It is possible to bypass BadBlue security checks when '.hts' files are requested by a remote user. BadBlue restricts...

CVE-2001-1407

Bugzilla before 2.14 is vulnerable: users can bypass group security by marking a bug as a duplicate of a restricted bug, which adds the user to the restricted bug’s CC list and lets them view it. Affected: Bugzilla ≤ 2.13 (pre-2.14). Root cause: bypass of group security checks via duplicate marki...

MyRoom 3.5 GOLD - save_item.php Arbitrary File Upload

MyRoom 3.5 GOLD - saveitem.php Arbitrary File Upload source: https://www.securityfocus.com/bid/6644/info A problem with MyRoom may make it possible for remote attackers to upload files to a vulnerable system. Due to inadequate security checks performed by some PHP scripts, an attacker is able to...

MyRoom 3.5 GOLD - 'save_item.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/6644/info A problem with MyRoom may make it possible for remote attackers to upload files to a vulnerable system. Due to inadequate security checks performed by some PHP scripts, an attacker is able to upload arbitrary files to the system. Given the abili...

CVE-2002-1262

Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files...

CVE-2002-1262

The CVE-2002-1262 entry concerns Internet Explorer 5.5 and 6.0 failing to enforce security checks on external caching, allowing a remote attacker to read arbitrary files. OpenVAS entries (8910xxxx patches) and CERT details indicate the issue involves caching/reference validation, with potential a...

CVE-2002-0052

CVE-2002-0052 corresponds to an Internet Explorer vulnerability where incorrect VBScript handling in cross-domain frames can allow a remote attacker to read local files. Affected IE versions include 5.01, 5.5, and 6.0. The flaw arises from VBScript handling in domain security checks, enabling inf...

CVE-2001-1182

The CVE-2001-1182 vulnerability affects HP-UX systems (versions 11.00, 11.11, and 10.20) where login allows restricted shell users to bypass certain security checks and gain privileges. The provided documents describe the impact as privilege escalation via login restrictions but do not specify th...

Microsoft Windows User Groups List

Using the supplied credentials it was possible to retrieve the list of groups each user belongs to. Groups are stored in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10894; scriptversion"1.20"; scriptnameenglish:"Microsoft Windows User...

CVE-2001-1182

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges...

Advisory CA-2001-12

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-12 Superfluous Decoding Vulnerability in IIS Original release date: May 15, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft IIS Overview A serious...

IIS decodes filenames superfluously after applying security checks

Overview Microsoft IIS decodes filenames after applying security checks, allowing an attacker to execute commands. Description To accomodate complex URIs, RFC 2396 specifies a means to encode arbitrary octets using hexadecimal characters and the percent sign %. Quoting from RFC 2396: An escaped...

yabb.txt

YaBB 9.1.2000 Multiple Vulnerabilities + Advisory by pestilence www.synnergy.net |===============================================| Affected program: YABB 9.1.2000 previous ? System : Linux, UNIX, Windows Problem : Problem located in all scripts that handle files. Discovery :...

YaBB 1.9.2000 Vulnerabilitie

YaBB 9.1.2000 Multiple Vulnerabilities + Advisory by pestilence www.synnergy.net |===============================================| Affected program: YABB 9.1.2000 previous ? System : Linux, UNIX, Windows Problem : Problem located in all scripts that handle files. Discovery :...

lynx-2.8.x.txt

// This message hasn't been sent to lynx-dev list, as it requires // subscription for sending bugreports. Sorry for that. Since 2.7 releases ?, lynx has mechanisms to avoid spoofed 'special URLs'. It's designed to protect lusers from malicious, internal pseudo-protocols like LYNXDIRED://,...