HP-UX Security patch : PHNE_9375

The remote host is missing HP-UX Security Patch number PHNE9375 . Security Vulnerability in the ppl executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17000;...

HP-UX PHNE_24419 : HP-UX running sendmail(1M), Remote Unauthorized Access (HPSBUX00179 SSRT071387 rev.3)

s700800 11.00 sendmail1m 8.9.3 patch : In HP sendmail1m release 8.8.6 and 8.9.3 under certain conditions an email queue warning message is returned with the Diagnostic-Code and incorrect information not intended to be seen without authorization. However, HP sendmail1m release 8.11.1 does not...

Debian DSA-683-1 : postgresql - buffer overflows

Several buffer overflows have been discovered in PL/PgSQL as part of the PostgreSQL engine which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Important: Red Hat Security Advisory: gpdf security update

An updated gpdf package that fixes two security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GPdf is a viewer for Portable Document Format PDF files for GNOME. A buffer overflow flaw was found in the Gfx::doImage...

[Full-Disclosure] Credit Card data disclosure in CitrusDB

Credit Card data disclosure in CitrusDB A group of students at our lab called RedTeam found an information disclosure vulnerability in CitrusDB which can result in disclosure of credit card information. Details ======= Product: CitrusDB Affected Version: = 0.3.5 Immune Version: =0.3.6 OS affected...

Mandrake Linux Security Advisory : MySQL (MDKSA-2005:036)

A temporary file vulnerability in the mysqlaccess script in MySQL was discovered by Javier Fernandez-Sanguino Pena. This flaw could allow an unprivileged user to let root overwrite arbitrary files via a symlink attack. It could also be used to view the contents of a temporary file which could...

Symantec products vulnerable to buffer overflow via a specially crafted UPX file

Overview The Symantec AntiVirus Library DEC2EXE component is vulnerable to remote arbitrary code execution. Description The Symantec AntiVirus Library is used in many Symantec and third-party virus scanning products, including Symantec Norton Antivirus and Symantec BrightMail AntiSpam.The AntiVir...

KLA10270 OSI vulnerability in NetOp

An unspecified vulnerability was found in NetOp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products NetOp CVE list CVE-2004-0950 warning Solution...

SquirrelMail may allow execution of arbitrary code

Overview SquirrelMail 1.2.6 may allow remote execution of arbitrary code via URL manipulation. Description From the SquirrelMail webpage:SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render i...

[SA14063] SnugServer FTP Server Directory Traversal Vulnerability

TITLE: SnugServer FTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA14063 VERIFY ADVISORY: http://secunia.com/advisories/14063/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: SnugServer 3.x http://secunia.com/product/4576/...

[SA14016] CoolForum Two Vulnerabilities

TITLE: CoolForum Two Vulnerabilities SECUNIA ADVISORY ID: SA14016 VERIFY ADVISORY: http://secunia.com/advisories/14016/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: CoolForum v0.x http://secunia.com/product/401/ DESCRIPTION: benjilenoob h...

KLA10419 WLF vulnerability in getmail

Unspecified vulnerabilities were found in getmail. By exploiting these vulnerabilities malicious users can overwrite arbitrary files in arbitrary directories. These vulnerabilities can be exploited locally via a symlink attack. Original advisories - Related products getmail CVE list CVE-2004-0881...

[SA13976] BRIBBLE webadmin Authentication Bypass Vulnerability

TITLE: BRIBBLE webadmin Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13976 VERIFY ADVISORY: http://secunia.com/advisories/13976/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BRIBBLE 1.x http://secunia.com/product/4562/ DESCRIPTION: A vulnerabili...

[SA13993] ginp Java Preferences API Security Bypass

TITLE: ginp Java Preferences API Security Bypass SECUNIA ADVISORY ID: SA13993 VERIFY ADVISORY: http://secunia.com/advisories/13993/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: ginp 0.x http://secunia.com/product/4566/ DESCRIPTION: A security issue has been reporte...

[SA13960] GraphicsMagick PSD Image Decoding Buffer Overflow

TITLE: GraphicsMagick PSD Image Decoding Buffer Overflow SECUNIA ADVISORY ID: SA13960 VERIFY ADVISORY: http://secunia.com/advisories/13960/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: GraphicsMagick 1.x http://secunia.com/product/3764/ DESCRIPTION: A vulnerability...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2005:009)

A vulnerability in mpg123's ability to parse frame headers in input streams could allow a malicious file to exploit a buffer overflow and execute arbitrary code with the permissions of the user running mpg123. The updated packages have been patched to prevent these problems. %NASLMINLEVEL 70300 C...

phpGroupWare index.php Calendar Date XSS

The version of PhpGroupWare on the remote host is reportedly affected by HTML injection vulnerabilities that present themselves due to a lack of sufficient input validation performed on form fields used by PhpGroupWare modules. A malicious attacker may exploit these issues to inject arbitrary HTM...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2004:163)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like kdegraphics, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated...

KLA10302 DoS vulnerability in Eudora

A buffer overflow was found in Eudora. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Release note Related products Qualcom-Eudora CVE list CVE-2004-2301 warnin...

KLA10053 DoS vulnerability in ActivePerl

An integer overflow vulnerability was found in ActivePerl. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited at a point related to the duplication operator via a large multiplier. Original advisories...