Cisco PIX and ASA LOCAL Method Privilege Escalation Vulnerability

Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series Adaptive Security Appliances ASA contain a vulnerability that could allow an authenticated, remote attacker to gain elevated privileges on the device. The vulnerability only exists on devices using LOCAL method for user...

Information displayed in the security field should be approached with caution. – Opera Security Advisories

Information displayed in the security field should be approached with caution. – Opera Security Advisories OPCOM Team | February 9, 2007 Summary Even though a Certificate Authority has verified and signed it, a usershould not trust the Organization name without checking the domain name.A fraudule...

FreeBSD : bind9 -- Denial of Service in named(8) (ef3306fc-8f9b-11db-ab33-000e0c2e438a)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

Solaris 10 (sparc) : 124208-01

SunOS 5.10: Trusted Extensions header file. Date this patch was last updated by Sun : Dec/11/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 124209-01

SunOS 5.10x86: Trusted Extensions header. Date this patch was last updated by Sun : Dec/07/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

HP-UX可信模式未明拒绝服务漏洞

HP-UX是一款商业性质的操作系统。 HP-UX可信模式应用程序不正确处理异常条件，本地攻击者可以利用漏洞进行拒绝服务攻击，使系统崩溃。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00 http://www2.itrc.hp.com/...

CVE-2006-6264

Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering...

CVE-2006-6264

Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering...

CVE-2006-6264

CVE-2006-6264 describes a Teredo weakness where trusted peer entries are created for arbitrary incoming Teredo addresses, even when the low 32 bits encode an intranet address. This could allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 i...

Debian DSA-1075-1 : awstats - programming error

Hendrik Weimer discovered that awstats can execute arbitrary commands under the user id the web-server runs when users are allowed to supply arbitrary configuration files. Even though, this bug was referenced in DSA 1058 accidentally, it was not fixed yet. The new default behaviour is not to acce...

CVE-2006-4390

CFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted...

CVE-2006-4390

Concrete details found: CVE-2006-4390 affects CFNetwork in Mac OS X 10.4.x (10.4.0–10.4.7) and 10.3.9, where SSL encryption could mislead users into trusting remote sites (lock icon may display without proper identity). The issue is mitigated by Mac OS X 10.4.8 Security Update, which fixes multip...

GLSA-200609-18 : Opera: RSA signature forgery

The remote host is affected by the vulnerability described in GLSA-200609-18 Opera: RSA signature forgery Opera makes use of OpenSSL, which fails to correctly verify PKCS 1 v1.5 RSA signatures signed by a key with exponent 3. Some CAs in Opera's list of trusted signers are using root certificates...

Opera: RSA signature forgery

Background Opera is a multi-platform web browser. Description Opera makes use of OpenSSL, which fails to correctly verify PKCS 1 v1.5 RSA signatures signed by a key with exponent 3. Some CAs in Opera's list of trusted signers are using root certificates with exponent 3. Impact An attacker could...

PT-2006-5617 · Mclinkscounter · Mclinkscounter

Name of the Vulnerable Software and Affected Versions: mcLinksCounter version 1.1 Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the langfile parameter in several PHP files, including "login.php", "stats.php", "detail.php", and "erase.php"...

opera -- RSA Signature Forgery

Opera reports: A specially crafted digital certificate can bypass Opera's certificate signature verification. Forged certificates can contain any false information the forger chooses, and Opera will still present it as valid. Opera will not present any warning dialogs in this case, and the securi...

bind9 -- Denial of Service in named(8)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

[SA21710] BlackICE PC Protection "NtOpenSection()" Denial of Service

TITLE: BlackICE PC Protection "NtOpenSection" Denial of Service SECUNIA ADVISORY ID: SA21710 VERIFY ADVISORY: http://secunia.com/advisories/21710/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system SOFTWARE: BlackICE PC Protection 3.x http://secunia.com/product/1702/ DESCRIPTION: David Matous...

HP-UX PHCO_34214 : HP-UX in Trusted mode, Local Denial of Service (DoS) (HPSBUX02141 SSRT51153 rev.1)

s700800 11.11 libpamunix cumulative patch : A potential security vulnerability has been identified in HP-UX running in Trusted Mode. The potential vulnerability could be exploited by a local authorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

HP-UX PHCO_34806 : HP-UX in Trusted mode, Local Denial of Service (DoS) (HPSBUX02141 SSRT51153 rev.1)

s700800 11.00 libpamunix cumulative patch : A potential security vulnerability has been identified in HP-UX running in Trusted Mode. The potential vulnerability could be exploited by a local authorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...