Important: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the X Window System, which provides the core...

Important: Red Hat Security Advisory: xorg-x11 security update

Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The xorg-x11 packages contain X.Org, an open source implementation of the X Window...

GLSA-200805-07 : Linux Terminal Server Project: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200805-07 Linux Terminal Server Project: Multiple vulnerabilities LTSP version 4.2, ships prebuilt copies of programs such as the Linux Kernel, the X.org X11 server GLSA 200705-06, GLSA 200710-16, GLSA 200801-09, libpng GLSA...

Linux Terminal Server Project: Multiple vulnerabilities

Background The Linux Terminal Server Project adds thin-client support to Linux servers. Description LTSP version 4.2, ships prebuilt copies of programs such as the Linux Kernel, the X.org X11 server GLSA 200705-06, GLSA 200710-16, GLSA 200801-09, libpng GLSA 200705-24, GLSA 200711-08, Freetype GL...

Tomcat: Multiple vulnerabilities

Background Tomcat is the Apache Jakarta Project's official implementation of Java Servlets and Java Server Pages. Description The following vulnerabilities were reported: Delian Krustev discovered that the JULI logging component does not properly enforce access restrictions, allowing web...

OpenSSH: Privilege escalation

Background OpenSSH is a complete SSH protocol implementation that includes an SFTP client and server support. Description Two issues have been discovered in OpenSSH: Timo Juhani Lindfors discovered that OpenSSH sets the DISPLAY variable in SSH sessions using X11 forwarding even when it cannot bin...

AuraCMS 2.1 - Remote File Attachment Local File Inclusion

AuraCMS 2.1 - Remote File Attachment Local File Inclusion AuraCMS 2.1 - Remote File Attachment - Local File Inclusion Vendor : http://www.auracms.org/ Download : http://www.auracms.org/dljump.php?id=42 Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net...

Bradford CampusManager v3.1(6) Sensitive Data Disclosure

Bradford CampusManager v3.16 Sensitive Data Disclosure The following directories should be protected from world readability. Child folders include backup, log, and configuration files. http://cmnms.target.com:8080/runTime/ http://cmnms.target.com:8080/remediationReports/ Vulnerable: CampusManager...

CVE-2005-3631

The CVE-2005-3631 issue affects udev, where permissions on certain files under /dev/input were not set correctly. The root cause is flawed permission handling in udev, allowing a local attacker to potentially view sensitive data entered at the console (e.g., passwords). Public references in Red H...

osTicketSQL.txt

GulfTech Security Research May 2nd, 2005 Vendor : osTicket URL : http://www.osticket.com/ Version : All Versions Risk : Multiple Vulnerabilities Description: osTicket is a widely-used open source support ticket system. It is a lightweight support ticket tool written mainly using PHP scripting...

Invision Community Blog 1.01.1 - Multiple Input Validation Vulnerabilities

Invision Community Blog 1.01.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/13910/info Multiple input validation vulnerabilities reportedly affect Invision Community Blog. These issues are due to a failure of the application to properly sanitize...

NPDS 4.8 5.0 - sdv_infos.php?sitename Cross-Site Scripting

NPDS 4.8 5.0 - sdvinfos.php?sitename Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

CodeThatShoppingCart 1.3.1 - 'catalog.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13560/info CodeThatShoppingCart is reportedly affected by multiple input validation vulnerabilities. These issues may allow remote attackers to carry out cross-site scripting and SQL injection attacks. An attacker may also potentially disclose sensitive...

MyBloggie 2.1 - index.php Cross-Site Scripting

MyBloggie 2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13507/info myBloggie is affected by multiple vulnerabilities. An attacker may leverage these issues to carry out cross-site scripting, HTML injection and SQL injection attacks against the affected application...

Logics Software LOG-FT - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...

Avaya IP Office Phone Manager - Local Password Disclosure

Avaya IP Office Phone Manager - Local Password Disclosure include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 2 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

[SA12765] Microsoft Internet Explorer Disclosure of Sensitive XML Information

TITLE: Microsoft Internet Explorer Disclosure of Sensitive XML Information SECUNIA ADVISORY ID: SA12765 VERIFY ADVISORY: http://secunia.com/advisories/12765/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Internet Explorer 6...

CGIScript.net csNews 1.0 - Header File Type Restriction Bypass

source: https://www.securityfocus.com/bid/4994/info csNews is a script for managing news items on a website. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible for a malicious admin user to bypass file type restrictions on the header and...

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from...