SLES10: undocumented patch for 4acd101addd2ea93972eb5d9389cadf3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: update-test-security More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: undocumented patch for 4acd101addd2ea93972eb5d9389cadf3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: update-test-security More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SuSE 10 Security Update : undocumented patch for 4acd101addd2ea93972eb5d9389cadf3 (ZYPP Patch Number 5026)

Test update of update-test-security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41595; scriptversion"1.10";...

CVE-2009-3200

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable,...

Asante FM2008 backdoor account

Undocumented superuser/asante account...

Huawei D100 wireless router multiple security vulnerabilities

Undocumented unchangable telnet account admin:admin, information leakage...

Null pointer dereference

The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented apple.laf.CColourUIResource constructor with a crafted value in the first argument, which is dereferenced as a pointer...

Apple Java CColourUIResource Pointer Dereference Code Execution Vulnerability

his vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Java HotSpot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the undocumented...

CVE-2003-1567

The undocumented TRACK method in Microsoft Internet Information Services IIS 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by usi...

Airtel ADSL modems backdoor

Undocumented accounts 'user' and 'support'...

Akamai Download Manager ActiveX code execution

Undocumented properties allow code download and execute...

Code injection

The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...

Aztech ADSL routers backdoor

It's possible to obtain administrative access with undocumented account isp/isp...

NetGear ReadyNAS RAIDiator default password

There are 3 default account, one of which is undocumented with root access...

Multiple SAP Internet Graphics Service security vulnerabilities

File removal, insecure undocumented features, buffer overflow, crossite scripting...

Low: Red Hat Security Advisory: util-linux security and bug fix update

An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...

Project Server 2003 - Credential Disclosure

============================================================== Project Server 2003 - Credential Disclosure [email protected] ============================================================== Microsoft Project server 2003 implements a thick client for some of the functionality. The...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSUndocumentedFeatures.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Undocumented Features ================== Vulnerability...

[Full-disclosure] (0-Day) PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42

Title: PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42 Version: 1.4.1.0040 Issues: 1.Phone reboots from the Nessus httpfingerprintinghmap.nasl script. 2.Phone reboots from a long URL sent to the HTTP daemon 3.Undocumented open port TCP/42 returns “Halt! Who goes...

CVE-2006-3285

The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.251 uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data aka bugs CSCsd15955...