HP-UX PHSS_32358 : HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (HPSBMA01125 SSRT4829 rev.2)

s700800 11.X OV NNM6.31/ET1.51 Intermediate Patch, Nov-04 : A potential vulnerability has been identified with OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely by an unauthorized user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network...

Vulnerabilities in the Internet Key Exchange Xauth Implementation

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

CVE-2004-2087

Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user...

FloosieTek FTGatePro 1.2 - WebAdmin Interface Information Disclosure

source: https://www.securityfocus.com/bid/8578/info A weakness has been reported in the FTGatePro WebAdmin Interface that could allow an unauthorized user to gain sensitive information. The problem is believed to occur due to insufficient access controls put in place by FTGatePro. As a result, an...

SudBox Boutique 1.2 - 'login.php' Authentication Bypass

source: https://www.securityfocus.com/bid/7651/info A vulnerability has been reported for SudBox Boutique. The problem occurs due to insufficient initialization of variables and may allow an unauthorized user to gain authenticate. Specifically, by making a malicious request to the login.php scrip...

Security Update: [CSSA-2001-SCO.26] dtterm argument buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Do not reply to this mail. This security advisory is being sent from a nonexistent address in order to avoid spam problems. Caldera's contact address for UNIX security issue...

Cisco PIX 4.x5.x TACACS+ - Denial of Service

Cisco PIX 4.x5.x TACACS+ - Denial of Service source: https://www.securityfocus.com/bid/2551/info PIX is an enterprise firewall engineered and maintained by Cisco Systems. It is designed to provide robust features and multiple methods of access control and filtering. A problem with the PIX could...

Linux Kernel 2.2.x - 'sysctl()' Memory Reading

/ source: https://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl call allows a privileged program to read o...

Дырка в News Publisher CGI

Из-за недостаточной проверки ввода пользователя есть возможность добавлять пользователей...

Дырка в MandrakeUpdate

При обновлении временные файлы создаются в директории /tmp что позволяет подменить их непривилигерованному пользователю...

ntop.advisory.txt

================================================================================ Hackerslab bugpaper ntop web mode vulnerabliity ================================================================================ Command : /sbin/ntop -w SYSTEM : N/A INFO : ntop - display top network users -w Starts...

Дырка в Veritas Volume Manager

При загрузке создается файл, открытый на запись любому пользователю, который в дальнейшем запускается на выполнение...

NetBSD 1.3.2 SGI IRIX 6.5.1 - at(1) Read File

NetBSD 1.3.2 SGI IRIX 6.5.1 - at1 Read File source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access...

BSDOS 2.1 DGUX 7.0 Debian 1.3 HP-UX 10.34 IBM AIX 4.2 SGI IRIX 6.4 Solaris 2.5.1 - usrbinX11xlock Local Privilege Escalation (2)

BSDOS 2.1 DGUX 7.0 Debian 1.3 HP-UX 10.34 IBM AIX 4.2 SGI IRIX 6.4 Solaris 2.5.1 - usrbinX11xlock Local Privilege Escalation 2 / source: https://www.securityfocus.com/bid/224/info The xlock program is used to lock the local X display until the user supplies the correct password. A buffer overflow...