Solaris 8 (sparc) : 109894-01

SunOS 5.8: /kernel/drv/sparcv9/bpp driver patch. Date this patch was last updated by Sun : Nov/15/00 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Solaris 8 (x86) : 109135-33

SunOS 5.8x86: WBEM patch. Date this patch was last updated by Sun : Jul/06/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 108835-04

CDE 1.4: dtcm patch. Date this patch was last updated by Sun : Feb/06/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid13297;...

Solaris 9 (x86) : 114009-01

SunOS 5.9x86: cachefsd Patch. Date this patch was last updated by Sun : Mar/19/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 109695-03

SunOS 5.8: /etc/smartcard/opencard.properties patch. Date this patch was last updated by Sun : Jul/23/01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

[Full-Disclosure] Centre 1.0 PHP injection, bypass authentication + possible SQL injection.

Summary: The Miller Group, Inc. www.miller-group.net announces the release of Centre, a free student information system for public and non-public schools. Centre is a web-based, open source, student management product with features that include scheduling, grade book, attendance, eligibility,...

Apache 1.3: Buffer overflow in mod_proxy

Background The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards. Description A bu...

Major Cpanel Expliot HTML Injection

Major Bug found 6/7/04 Discovered by Verb0s Reseller accounts with cpanel, in the password modification page, can insert a basic injection ex:http://domain:2086/scripts/passwd?password=&domain=&user= The code will modify all the mysql database passwords, in which the reseller shouldnb't have...

[Full-Disclosure] [SECURITY] [DSA 499-1] New rsync packages fix directory traversal bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 499-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...

DSA-485 ssmtp - format string

Bulletin has no description...

Libxml2 URI parsing errors in nanohttp and nanoftp

Overview Libxml is the XML parser for Gnome, a desktop suite and development platform for Linux systems. Libxml2, the latest version of the library as of this writing, has a buffer overflow vulnerability which may allow execution of arbitrary code. Description Gnome, a desktop suite and developme...

Symlink Vulnerability in GNU automake <1.8.3

Vulnerable: GNU automake 1.8.3 Not Vulnerable: GNU automake 1.8.3 Project website: http://www.gnu.org/software/automake/ Description of libtool from website: "Automake is a tool for automatically generating Makefile.in' files compliant with the GNU Coding Standards." Discussion: The Makefiles...

[Full-Disclosure] Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zone Labs Security Advisory ZL04-008 Zone Labs SMTP Processing Vulnerability Date Published February 18, 2004 Date Last Revised February 18, 2004 Severity Medium Overview ======== A security vulnerability exists in specific versions of ZoneAlarm,...

DSA-441 linux-kernel-2.4.17-mips+mipsel - missing function return value check

Bulletin has no description...

Symlink Vulnerability in GNU libtool <1.5.2

Vulnerable: libtool 1.5.2 Not Vulnerable: libtool 1.5.2 Project website: http://www.gnu.org/software/libtool/libtool.html Description of libtool from website: "GNU libtool is a generic library support script. Libtool hides the complexity of using shared libraries behind a consistent, portable...

KLA10355 LPE vulnerability in Symantec

An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can gain system privileges. This vulnerability can be exploited locally via an unknown vector. Original advisories Symantec advisory Related products Symantec-Windows-LiveUpdate...

KLA10130 ACE vulnerability in CuteFTP

A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server response. Original advisories - Related products CuteFTP-5-XP CVE list CVE-2003-1260 high...

HylaFAX: Remote code exploit in hylafax

Background HylaFAX is a popular client-server fax package. Description During a code review of the hfaxd server, the SuSE Security Team discovered a format bug condition that allows a remote attacker to execute arbitrary code as the root user. However, the bug cannot be triggered in the default...

PostgreSQL to_ascii() Function Remote Overflows

According to its version number, the PostgreSQL server listening on this port is vulnerable to two buffer overflows in the toascii function that could allow an attacker who can query the remote database to execute arbitrary code, subject to the privileges under which the service operates...

Opera < 7.21 HREF Escaped Character Overflow

The installed version of Opera on the remote host is vulnerable to a buffer overflow in the code that parses HREF tags in the server. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host to visit the site using Opera. The attacker would then be able to...