phpMyNewsletter 0.6.10 - Remote File Inclusion

phpMyNewsletter 0.6.10 - Remote File Inclusion source: https://www.securityfocus.com/bid/5886/info A vulnerability has been discovered in phpMyNewsLetter. Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. This may allow...

PT-1999-1479 · Mutt · Mutt

Name of the Vulnerable Software and Affected Versions: mutt affected versions not specified Description: The issue allows remote attackers to execute commands via malformed MIME messages due to a buffer overflow in the mutt mail client. Recommendations: At the moment, there is no information abou...

PT-1999-1453 · Sccw · Sccw

Name of the Vulnerable Software and Affected Versions: sccw affected versions not specified Description: The issue allows local users to read arbitrary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1242 · Gopher · Gopher

Name of the Vulnerable Software and Affected Versions: Gopher service affected versions not specified Description: The issue is related to the Gopher service being active. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1245 · Rlogin +1 · Rlogin +1

Name of the Vulnerable Software and Affected Versions: rsh/rlogin affected versions not specified Description: The issue is related to the rsh/rlogin service being active. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1189 · Unix · Unix

Name of the Vulnerable Software and Affected Versions: Unix affected versions not specified Description: The issue arises when two or more Unix accounts share the same user ID UID, potentially leading to unauthorized access and privilege escalation. Recommendations: At the moment, there is no...

PT-1999-1241 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The chargen service is running. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-1999-1023 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue allows an attacker to gain root access to the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1231 · Rexec · Rexec

Name of the Vulnerable Software and Affected Versions: rexec affected versions not specified Description: The issue is related to the rexec service being active. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1230 · Sun · Rpc.Sprayd

Name of the Vulnerable Software and Affected Versions: rpc.sprayd affected versions not specified Description: The issue is related to the rpc.sprayd service being active. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1997-1068 · Washington University · Wu-Ftpd

Name of the Vulnerable Software and Affected Versions: wu-ftpd affected versions not specified Description: The issue allows any user and password combination, potentially granting unauthorized access. Recommendations: At the moment, there is no information about a newer version that contains a f...

PT-1997-1062 · Glimpse · Glimpse

Name of the Vulnerable Software and Affected Versions: Glimpse package affected versions not specified Description: The issue concerns the aglimpse CGI program within the Glimpse package, which allows for the remote execution of arbitrary commands. Recommendations: At the moment, there is no...

PT-1997-1113 · Cfingerd · Cfingerd

Name of the Vulnerable Software and Affected Versions: cfingerd affected versions not specified Description: The issue allows cfingerd to list all users on a system via search. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1997-1119 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer affected versions not specified Description: The issue allows for remote command execution in Microsoft Internet Explorer, utilizing .lnk and .url files. Recommendations: At the moment, there is no information abou...

PT-1997-1164 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue exposes valid user information to any entity on the network due to a version of finger being run. Recommendations: At the moment, there is no information about a newer version that...

PT-1997-1110 · Talk · Talk

Name of the Vulnerable Software and Affected Versions: talk affected versions not specified Description: A denial of service issue in the talk program allows remote attackers to disrupt a user's display. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-1994-1003 · Great Circle Associates · Majordomo

Name of the Vulnerable Software and Affected Versions: Majordomo affected versions not specified Description: A remote attacker can execute commands through Majordomo by utilizing the Reply-To field and a "lists" command. Recommendations: At the moment, there is no information about a newer versi...

MS:F1FC8B99-38C7-4C50-B93F-836D5FBD1956

...