1st Class Mail Server 4.0 1 - general.tagz Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

DSA-447 hsftp - format string

Bulletin has no description...

ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote arbitrary file retrieving

ZH2004-06SA security advisory: ShopCartCGI v2.3 Remote arbitrary file retrieving Published: 17 february 2004 Released: 17 february 2004 Name: ShopCartCGI Affected Systems: 2.3 Issue: Remote arbitrary file retrieving Author: G00db0y from Zone-h Security Labs - [email protected] -...

PJ CGI Neo PJreview_Neo.cgi p Parameter Traversal Arbitrary File Access

The remote host is running PJreviewneo.cgi - a web-based software. There is a bug in this software which may allow an attacker to read arbitrary files on the remote web server with the privileges of the web user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

PHPGedView 2.61 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/9368/info PhpGedView is prone to multiple file include vulnerabilities. The source of the issue is that a number of scripts that ship with the software permit remote users to influence require paths for various external files. This will permit remote...

Jordan Windows Telnet Server 1.01.2 - Username Stack Buffer Overrun (1)

Jordan Windows Telnet Server 1.01.2 - Username Stack Buffer Overrun 1 source: https://www.securityfocus.com/bid/9316/info Jordan Windows Telnet Server has been reported prone to a remote buffer overrun vulnerability. The issue has been reported to present itself when a username of excessive lengt...

SGDynamo sgdynamo.exe HTNAME Parameter Path Disclosure

The CGI 'sgdynamo.exe' can be tricked into giving the physical path to the remote web root. This information may be useful to an attacker who can use it to launch more effective attacks against the remote server. %NASLMINLEVEL 70300 This script written by Scott Shebby 12/2003 See the Nessus Scrip...

CuteNews Debug Info Disclosure

There is a bug in the remote version of CuteNews that allows an attacker to obtain information from a call to the phpinfo PHP function such as the username of the user who installed php, if they are a SUDO user, the IP address of the host, the web server version, the system version unix / linux,...

My_eGallery < 3.1.1g Remote File Inclusion

The remote web server is hosting the 'myegallery' PostNuke module. The installed version is potentially affected by a remote file include vulnerability because the application fails to properly sanitize input to include include statements. An attacker may use this flaw to execute arbitrary code i...

Resin Status Page Information Disclosure

Requesting the URI '/caucho-status' or '/server-status' gives information about the currently running Resin java servlet container. %NASLMINLEVEL 70300 This script was written by Vincent Renardias Licence : GPL v2 Changes by Tenable: - Revised plugin title, family change 4/2/2009...

Microsoft IIS 404 Response Service Pack Signature

The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...

Moderate: Red Hat Security Advisory: : Updated Apache and mod_ssl packages fix security vulnerabilities

Updated Apache and modssl packages that fix several minor security issues are now available for Red Hat Linux 7.1, 7.2, and 7.3. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl whi...

Netris client Buffer Overflow Vulnerability.

-INTRODUCTION- Netris is a Linux clone of the classic infamous game Tetrs, giving users three main game modes: play an individual game, server mode: bind to a port and wait for an incoming connection from an opponents Netris client, and connect mode: connect to an opponents Netris client which is...

MDaemon 5.0.5 authentication vulnerability

Hello, There is a security problem on MDaemon 5.0.5 maybe other versions affected as well regarding smtp authentication. Blank password authenticates any valid user: For primary domain: User: VALIDUSER or [email protected] Password: blank password For secondary domains: User:...

wam1040.txt

Directory Traversal Vulnerability in 121 WAM! Server 1.0.4.0 Url: http://www.121software.com/121wam/server.asp "Imagine if you could centralise the management of your FTP server farm and give customers additional database management capability." "121 WAM! Server is a standard FTP server for...

X servers may have insecure default configuration of xhosts

Overview Some X server products client software for connecting to a host with Xwindows capabilities may be configured insecurely by default. Description In X windows terminology, the X server is the software which provides "services" to the client, while the X client is the software that makes...

NetSuite 1.01.2 - HTTP Server Directory Traversal

NetSuite 1.01.2 - HTTP Server Directory Traversal source: https://www.securityfocus.com/bid/8197/info The HTTP component of NetSuite has been reported prone to a directory traversal vulnerability. Various combinations of encoded directory traversal sequences may be used to break out of the web ro...

ProductCart Multiple Vulnerabilities

The remote host is using the ProductCart software suite. This set of CGIs is vulnerable to a SQL injection bug that could allow an attacker to take control of the server as an administrator. In addition, the application is susceptible various file disclosure and cross-site scripting attacks...

CVE-2003-0378

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...

URLScan for IIS Detection

The remote web server is using URLScan to protect itself, which is a good thing. However since it is possible to determine that URLScan is installed, an attacker may safely assume that the remote web server is Internet Information Server. C Tenable Network Security, Inc. Ref: Date: Sat, 31 May 20...