849 matches found
Infinity CGI Exploit Scanner Multiple Vulnerabilities
The remote is running Infinity Exploit Scanner, a web-based CGI vulnerability scanner implemented in perl and stored under the name 'nph-exploitscanget.cgi'. There is a flaw in this CGI that lets an attacker execute arbitrary commands on this host. In addition to this, there is a flaw in this CGI...
DSA-271 ecartis - unauthorized password change
Bulletin has no description...
ISC BIND < 9.2.2 DNS Resolver Functions Remote Overflow
The remote BIND 9 DNS server, according to its version number, is vulnerable to a buffer overflow which may allow an attacker to gain a shell on this host or to disable this server. C Tenable Network Security, Inc. Ref: https://www.isc.org/downloads/bind/...
Multiple implementations of the Session Initiation Protocol (SIP) contain multiple types of vulnerabilities
Overview Oulu University has discovered a variety of vulnerabilities affecting products that implement the Session Initiation Protocol SIP. These vulnerabiltites affect a wide variety of products, with impacts ranging from denial of service to execution of arbitrary code. SIP is used in Voice Ove...
Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino Web Server iNotes Overflow Systems Affected: Release 6.0 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.lotus.com Author: Mark Litchfield [email protected] Date: 17th February 2003 Advisory...
Important: Red Hat Security Advisory: apache security update
Updated apache and httpd packages are available which fix a number of security issues for Red Hat Linux Advanced Server 2.1. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Buffe...
[SECURITY] [DSA 219-1] New dhcpcd packages fix remote command execution vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 219-1 [email protected] http://www.debian.org/security/ Martin Schulze December 31st, 2002 http://www.debian.org/security/faq -...
DSA-212 mysql - multiple problems
Bulletin has no description...
DSA-199 mhonarc - cross site scripting
Bulletin has no description...
[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 194-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2002 http://www.debian.org/security/faq -...
DSA-169 htcheck - cross site scripting
Bulletin has no description...
DSA-167 kdelibs - cross site scripting
Bulletin has no description...
[SECURITY] [DSA 165-1] New PostgreSQL packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2002 http://www.debian.org/security/faq -...
Oracle Web Cache Admin Module Multiple GET Request Method DoS
It was possible to kill the web server by requesting '/.' or '/../', or sending an invalid request using chunked content encoding. An attacker may exploit this vulnerability to crash the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichae...
[SECURITY] [DSA-111-1] Multiple SNMP vulnerabilities
Package : ucd-snmp Problem type : remote exploit Debian-specific: no CERT Advisory : CA-2002-03 The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploit...
[SECURITY] [DSA-089-1] several problems in icecast-server
Package : icecast-server Problem type : remote root exploit and others Debian-specific: no The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems: if a client added a / after the filename of a file to be downloaded the server would...
Zope < 2.3.3 ZClass Permission Mapping Modification Local Privilege Escalation
The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for unauthorized access within the Zope...
Certain MIME types can cause Internet Explorer to execute arbitrary code when rendering HTML
Overview A vulnerability exists in Microsoft Internet Explorer that allows a malicious agent to execute arbitrary code when parsing MIME parts in a document. Any user or program that uses vulnerable versions of Internet Explorer to render HTML in a document for example, when browsing a filesystem...
[SECURITY] [DSA-029-1] New version of proftpd released
Package: proftpd Vulnerability: remote DOS & potential buffer overflow Debian-specific: no The following problems have been reported for the version of proftpd in Debian 2.2 potato: 1. There is a memory leak in the SIZE command which can result in a denial of service, as reported by Wojciech...
Caldera Systems Security Advisory
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: security problems in dhcp Advisory number: CSSA-2001-003.0 Issue date: 2001 January, 12 Cross reference: 1. Problem Description The DHCP server and client shipped as part of OpenLinux had security...