Potentially unwanted software

This script checks for the presence of files and programs which might have been installed without the consent of the user of the remote host. SPDX-FileCopyrightText: 2008 David Maciejak and Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are...

Potentially unwanted software

This script checks for the presence of files and programs which might have been installed without the consent of the user of the remote host. Verify each of the applications found to see if they are compliant with your organization's security policy. OpenVAS Vulnerability Test $Id:...

CVE-2008-3473: Undefined Security Weakness

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Eve...

CVE-2008-3474

CVE-2008-3474 is an information-disclosure vulnerability in Microsoft Internet Explorer 6/7 . IE may fail to correctly determine the origin domain/zone of web scripts, enabling a crafted HTML page to disclose sensitive data across domains. This CVE is addressed within the MS08-058 Cumulative Secu...

CVE-2008-3473

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Eve...

Apache Tomcat's default security policy is too open

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...

FreeBSD Ports: powerdns

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls...

CVE-2008-3875

The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls...

Security Best Practice: Blocking TeamViewer

TeamViewer is a cross-platform remote control application that allows the user to take complete control over a computer anywhere on the Internet, even through firewalls. TeamViewer also has file-sharing and chat capabilities. The use of TeamViewer may circumvent the organizational security policy...

Important: Red Hat Security Advisory: rhpki-common security update

Updated rhpki-common packages that fix a security issue are now available for Red Hat Certificate System 7.2. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Certificate System RHCS is an enterprise software system designed to manage...

Important: Red Hat Security Advisory: rhpki-common security update

An updated rhpki-common package that fixes a security issue is now available for Red Hat Certificate System 7.3. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Certificate System RHCS is an enterprise software system designed to manag...

D-Bus send_interface属性绕过安全策略漏洞

BUGTRAQ ID: 28023 CVECAN ID: CVE-2008-0595 D-BUS是一个设计目标为应用程序间通信的消息总线系统。 在评估是否应执行某一调用时，总线守护程序会查找安全策略来判断是否允许调用程序访问该调用。很多dbus服务的安全策略中包含有类似于以下的行： allow sendinterface="some.interface.WithMethods"/...

Apache Tomcat's default security policy is too open

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...

Orb Detection

Orb is installed on the remote Windows host. Orb is a peer-to- peer file sharing application for 'mycasting' digital content from a PC. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31651; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

tomcat5 security update

CentOS Errata and Security Advisory CESA-2008:0042 Updated tomcat packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Jav...

Moderate: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages technologies. A...

Null pointer dereference

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

DEBIAN-CVE-2008-0595

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

CVE-2008-0595

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...