Microsoft Agent vulnerable to trusted site spoofing

Overview Microsoft Agent contains a vulnerability that could allow a remote attacker to spoof trusted Internet content. Description Microsoft Agent is a software extension that enhances user interaction through the use of interactive personalities in the form of animated characters. Applications...

CVE-2005-1771

Summary (CVE-2005-1771) Unknown vulnerability in HP-UX Trusted System on versions B.11.00–B.11.23 may allow a remote attacker to gain unauthorized access, possibly via tools like remshd or telnet -t. Connected documents tie this CVE to HP patch advisories and NASL checks (e.g., HPSBUX01165, SSRT5...

CVE-2005-1771

Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t...

HP-UX PHCO_33215 : s700_800 11.11 libpam_unix cumulative patch

s700800 11.11 libpamunix cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running /sbin/passwd which could be locally exploited to create a Denial of Service DoS. HPSBUX02103 SSRT5953 - A potenti...

HP-UX PHNE_17030 : HP-UX Trusted System, Remote Unauthorized Access (HPSBUX01165 SSRT5899 rev.2)

s700800 11.00 r-commands cumulative mega-patch : A potential security vulnerability has been identified with HP-UX trusted systems where the vulnerability may be exploited to allow remote unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch chec...

HP-UX PHCO_29249 : s700_800 11.00 libpam and libpam_unix cumulative patch

s700800 11.00 libpam and libpamunix cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX systems where the vulnerability may be exploited to allow a local user to increase privilege. HPSBUX02091...

[security bulletin] SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01165 REVISION: 0 SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The information in...

CVE-2004-1811

The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates...

CVE-2005-1186

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting XSS attacks...

CVE-2005-1186

The CVE-2005-1186 entry affects Musicmatch Jukebox 10.00.2047 and earlier. The root cause is that the software adds the musicmatch.com domain to the Internet Explorer Trusted Sites zone, which can enable unauthorized activities within a domain and is demonstrated via cross-site scripting (XSS) at...

CVE-2005-1186

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting XSS attacks...

Microsoft Windows Kernel CSRSS Local Privilege Escalation Vulnerability

Description A local privilege-escalation vulnerability affects Microsoft Windows because the kernel fails to properly handle user-supplied messages. A local attacker may leverage this issue to completely compromise the computer. Technologies Affected Microsoft Windows 2000 Advanced Server Microso...

gld -- format string and buffer overflow vulnerabilities

Gld has been found vulnerable to multiple buffer overflows as well as multiple format string vulnerabilities. An attacker could exploit this vulnerability to execute arbitrary code with the permissions of the user running Gld, the default user being root. The FreeBSD port defaults to running gld ...

security flaw

Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks...

CVE-2005-0143

Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks...

CVE-2005-0143

Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks...

Fortinet FortiGate Web Console Management Detection

A Fortinet FortiGate Firewall is running on the remote host, and connections are allowed to its web-based console management port. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker...

CVE-2002-1591

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to Internet Explorer’s Trusted Sites Zone without user approval, potentially allowing code from that domain to bypass access restrictions. The connected documents provide AIM as the affected product and indicate the root cause is improper Tru...

CVE-2002-1591

AOL Instant Messenger AIM 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions...

CVE-2003-1123

Sun Java Runtime Environment JRE and SDK 1.4.001 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model...