several vulnerabilities present in Belkin wireless routers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory name: several vulnerabilities present in Belkin wireless routers Overall severity rating: HIGH risk Devices affected: "belkin54g" family of wireless routers 4 main vulnerabilities are included in this advisory: - - default telnet backdoor - -...

Windows XP memory information leak

If WMI is used a part of RPC cache memory is not cleaned, making sensitive information leakage...

[SA15260] FreeBSD Insecure iir Driver Permissions

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: FreeBSD Insecure iir Driver Permissions SECUNIA ADVISO...

CVE-2001-1366

The vulnerability CVE-2001-1366 concerns netscript prior to 1.6.3, where parsing of dynamic variables could let remote attackers alter program behavior or access sensitive information. The description and linked references confirm the affected component and potential impact but do not provide exp...

CVE-2002-0228

CVE-2002-0228 affects Microsoft MSN Messenger. The vulnerability allows remote attackers to use Javascript referencing an ActiveX object to obtain sensitive information (e.g., display names, web site navigation) when the user is connected to certain Microsoft sites or DNS-spoofed sites. OpenVAS/O...

CVE-2001-0330

Bugzilla 2.10 contains a vulnerability where a remote attacker can access the database username and password by requesting the globals.pl file, which is served as plain text by the web server. The issue arises from exposing sensitive configuration data in a Perl CGI file. A fix is available in Bu...

CVE-2000-0110

CVE-2000-0110 affects the WebSiteTool shopping cart application, where remote attackers can modify sensitive purchase information by manipulating hidden form fields in the shopping cart. The PT-2000-1098 entry corroborates this description but does not specify affected versions or a fix. No explo...

CVE-2000-0008

The CVE-2000-0008 issue concerns FTPPro, where local users can read sensitive data stored in plain text. Connected sources (PT-1999-1817) name FTPPro and describe the vulnerability as allowing local access to plaintext information, but do not specify affected versions or a repair/fix. Other conne...