Comdev eCommerce 3.0 - WCE.download.php Directory Traversal

Comdev eCommerce 3.0 - WCE.download.php Directory Traversal source: https://www.securityfocus.com/bid/14479/info Comdev eCommerce is prone to a directory traversal vulnerability. A remote unauthorized user can disclose the contents of arbitrary local files through the use of directory traversal...

sap internet graphics server 6.40 - Directory Traversal

sap internet graphics server 6.40 - Directory Traversal source: https://www.securityfocus.com/bid/14369/info Internet Graphics Server is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote unauthoriz...

RHEL 3 : cups (RHSA-2005:571)

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating system...

Moderate: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating system...

HP-UX PHNE_33159 : s700_800 11.11 cumulative ARPA Transport patch

s700800 11.11 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP IPv4. This vulnerability could be remotely exploited to cause a Denial of Service DoS. HPSBUX01137...

HP-UX PHSS_32690 : HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Privileged Code Execution, Denial of Service (DoS) (HPSBMA01140 SSRT4795, SSRT4797, SSRT4864 rev.2)

s700800 11.X OV NNM6.2 Patch for Jan-05 : Potential vulnerabilities have been identified with OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely by an unauthorized user to execute privileged code or to cause a Denial of ServiceDoS. %NASLMINLEVEL 70300 C Tenabl...

HP-UX PHSS_32358 : HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (HPSBMA01125 SSRT4829 rev.2)

s700800 11.X OV NNM6.31/ET1.51 Intermediate Patch, Nov-04 : A potential vulnerability has been identified with OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely by an unauthorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network...

Vulnerabilities in the Internet Key Exchange Xauth Implementation

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

CVE-2004-2087

Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user...

FloosieTek FTGatePro 1.2 - WebAdmin Interface Information Disclosure

source: https://www.securityfocus.com/bid/8578/info A weakness has been reported in the FTGatePro WebAdmin Interface that could allow an unauthorized user to gain sensitive information. The problem is believed to occur due to insufficient access controls put in place by FTGatePro. As a result, an...

SudBox Boutique 1.2 - 'login.php' Authentication Bypass

source: https://www.securityfocus.com/bid/7651/info A vulnerability has been reported for SudBox Boutique. The problem occurs due to insufficient initialization of variables and may allow an unauthorized user to gain authenticate. Specifically, by making a malicious request to the login.php scrip...

Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...

Cisco PIX 4.x5.x TACACS+ - Denial of Service

Cisco PIX 4.x5.x TACACS+ - Denial of Service source: https://www.securityfocus.com/bid/2551/info PIX is an enterprise firewall engineered and maintained by Cisco Systems. It is designed to provide robust features and multiple methods of access control and filtering. A problem with the PIX could...

Linux Kernel 2.2.x - 'sysctl()' Memory Reading

/ source: https://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl call allows a privileged program to read o...

Дырка в News Publisher CGI

Из-за недостаточной проверки ввода пользователя есть возможность добавлять пользователей...

Дырка в MandrakeUpdate

При обновлении временные файлы создаются в директории /tmp что позволяет подменить их непривилигерованному пользователю...

ntop.advisory.txt

================================================================================ Hackerslab bugpaper ntop web mode vulnerabliity ================================================================================ Command : /sbin/ntop -w SYSTEM : N/A INFO : ntop - display top network users -w Starts...

Дырка в Veritas Volume Manager

При загрузке создается файл, открытый на запись любому пользователю, который в дальнейшем запускается на выполнение...

NetBSD 1.3.2 SGI IRIX 6.5.1 - at(1) Read File

NetBSD 1.3.2 SGI IRIX 6.5.1 - at1 Read File source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access...

BSDOS 2.1 DGUX 7.0 Debian 1.3 HP-UX 10.34 IBM AIX 4.2 SGI IRIX 6.4 Solaris 2.5.1 - usrbinX11xlock Local Privilege Escalation (2)

BSDOS 2.1 DGUX 7.0 Debian 1.3 HP-UX 10.34 IBM AIX 4.2 SGI IRIX 6.4 Solaris 2.5.1 - usrbinX11xlock Local Privilege Escalation 2 / source: https://www.securityfocus.com/bid/224/info The xlock program is used to lock the local X display until the user supplies the correct password. A buffer overflow...