CVE-2007-0131

JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...

Fuji Xerox Printing Systems (FXPS) Print Engine Crafted Request HTTP Authentication Bypass

The remote host appears to be a Fuji Xerox Printing Systems FXPS printer. According to its firmware version, the web server component of the FXPS device reportedly fails to authenticate HTTP requests, which could allow a remote attacker to gain administrative control of the affected printer and...

InterScan VirusWall Remote Configuration Vulnerability

The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. OpenVAS Vulnerability Test $Id: interscanvwcgi.nasl 6063...

PHProjekt: setup.php vulnerability

Background PHProjekt is a modular groupware web application used to coordinate group activities and share files. Description Martin Muench, from it.sec, found a flaw in the setup.php file. Impact Successful exploitation of the flaw allows a remote attacker without admin rights to make unauthorize...

[BUGZILLA] Vulnerabilities in Bugzilla 2.16.6 and 2.18rc2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugzilla Security Advisory October 24, 2004 Summary ======= Bugzilla is a Web-based bug-tracking system, used by a large number of software projects. This advisory covers three security bugs that have recently been discovered and fixed in the Bugzilla...

Important: Red Hat Security Advisory: kernel security update

Updated Itanium kernel packages that fix a number of security issues are now available. The Linux kernel handles the basic functions of the operating system. This kernel updates several important drivers and fixes a number of bugs including potential security vulnerabilities. Paul Starzetz...

Fedora Core 1 : kernel-2.4.22-1.2197.nptl (2004-206)

During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to make unauthorized changes to the group ID of files in certain circumstances. In the 2.4 kernel, as shipped with Fedora Core 1, the only way this could happen is through the kernel nfs server. A user on a system tha...

RHEL 3 : kernel (RHSA-2004:360)

Updated kernel packages that fix a security vulnerability affecting the kernel nfs server for Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to make...

RHEL 2.1 : kernel (RHSA-2004:354)

Updated kernel packages that fix a security vulnerability affecting the kernel nfs server for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to ma...

Moderate: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a security vulnerability affecting the kernel nfs server for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to ma...

Moderate: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a security vulnerability affecting the kernel nfs server for Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. During an audit of the Linux kernel, SUSE discovered a flaw that allowed a user to make...

adv_microsoft_word_protection.txt

Guardeonic Solutions AG Thorsten Delbrouck http://www.guardeonic.com/ Security Advisory 01-2004 Advisory Name: Microsoft Word Form Protection Bypass Release Date: 2004-01-02 Affected Product: Microsoft Word Platform: Microsoft Windows, probably Apple Mac OS Version: tested on 2000, 2002 XP, 2003,...

Wingate_Registry_sploit.txt

Problem: All of the wingate server settings are stored in "HKEYLOCALMACHINE\Sofware\Qbik Software\Wingate" This makes it possible for anyone with registry editing permissions remote or physical to change wingate settings. Details: With about 10 minutes of exploration of the wingate settings i was...