4798 matches found
phpBB < 2.0.7 Multiple Script SQL Injection
The remote host is running a version of phpBB older than 2.0.7. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which may in turn be used to gain administrative access on the remote host or to obtain the MD5 hash of the password of any user...
Remote DoS in FreeRADIUS, all versions.
Application: FreeRADIUS, all versions http://www.freeradius.org Summary: A remote DoS, and possibly exploit, exists in all versions of the FreeRADIUS server. All users should upgrade to the latest version, as soon as it is officially release. For later announcements, see: http://www.freeradius.or...
Quagga / Zebra Malformed Telnet Command Denial of Service
A remote denial of service vulnerability exists in Zebra and Quagga that can be triggered by sending a telnet option delimiter with no actual option data, which causes the daemon to attempt to dereference a typically NULL pointer and crash. This affects all versions from 0.90a to 0.93b. MA...
[SNS Advisory No.69] Eudora "Reply-To-All" Buffer Overflow Vulnerability
---------------------------------------------------------------------- SNS Advisory No.69 Eudora "Reply-To-All" Buffer Overflow Vulnerability Problem first discovered on: Thu, 09 Jan 2003 Published on: Mon, 10 Nov 2003 ---------------------------------------------------------------------- Overvie...
[Full-Disclosure] STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability
STG Security Advisory: SSA-20031025-05 InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability Revision 1.0 Date Published: 2003-10-25 KST Last Update: 2003-10-25 Disclosed by SSR Team [email protected] Abstract ======== InfronTech's J2EE Web Application Server, WebTide, is a...
[Advisory] Powerslave 4.3 Information Leak Vuln.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================= H Zero Seven Security Advisory Product : FlyingDog Software - Powerslave Portalmanager Impact : information leak vulnerability Issue date: 19 Sept. 2003 Update : Powerslave 4.4.3pl3 Affected :...
LSH Daemon < 1.4.3 / 1.5.3 lshd Remote Overflow
According to its banner, the version of LSH a free replacement for SSH is a version prior to 1.4.3 / 1.5.3. It is, therefore, affected by a buffer overflow vulnerability due to improper handling of user input to the 'readline.c', 'channelcommands.c', and 'clientkeyexchange.c' source files that...
[CLA-2003:723] Conectiva Security Announcement - openslp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : openslp SUMMARY : Temporary file creation...
TrueType Font Server for X11 (xfstt) Malformed Packet Remote Overflow
The remote X Font Service for TrueType xfstt is vulnerable to a remote buffer overflow which may lead to code execution as root or a denial of service. C Tenable Network Security, Inc. Ref: Date: Tue, 15 Jul 2003 00:38:20 +0200 From: ruben unteregger To: [email protected] Subject: xfstt-1...
Important: Red Hat Security Advisory: : Updated wu-ftpd packages fix remote vulnerability.
Updated wu-ftpd packages are now available that fix a remotely exploitable security issue. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between computers on a network. An off-by-one bug has been discovered i...
ePolicy Orchestrator Multiple Remote Vulnerabilities (OF, FS)
According to its banner, the remote version of ePolicy Orchestrator has multiple vulnerabilities which may allow an attacker to gain information on the MSDE installation of this host, or even execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Important: Red Hat Security Advisory: stunnel security update
Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
According to its banner, the version of PHP 4.3.x installed on the remote host is prior to 4.3.2. It is, therefore, potentially affected by an information disclosure vulnerability. Due to a flaw in the function phpsafemodeincludedir, a local attacker could bypass safe mode and gain unauthorized...
WebCalendar long.php user_inc Parameter Traversal Arbitrary File Access
The remote installation of WebCalendar may allow an attacker to read arbitrary files on the remote host by supplying a filename to the 'userinc' argument of the file 'long.php'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues
Updated Ethereal packages available to fix a number of remotely exploitable security issues Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash or run arbitrary code by injecting a...
Carello E-Commerce Carello.dll Command Execution
The remote host appears to be running Carello.dll, a web-based shopping cart. Versions up to 1.3 of this web shopping cart have a command execution vulnerability. This could allow a remote attacker to run arbitrary commands on the system with the privileges of the web server. Note that no attack...
Mailreader 2.3.30 - 2.3.31 Multiple Vulnerabilities
Mailreader.com software is installed. A directory traversal flaw allows anybody to read arbitrary files on your system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: Mon, 28 Oct 2002 17:48:04 +0800 From: "pokleyzz" To: "bugtraq" , "Shaharil Abdul Malek" , "sk" , "pokley" ...
MyServer <= 0.4.2 Multiple Remote DoS
The remote host is running MyServer 0.4.2 or older. There are flaws in this software that could allow an attacker to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11770; scriptversion "1.25"; scriptbugtraqid7917, 8120;...
PostNuke Glossary Module page Parameter SQL Injection
The remote host is running a version of PostNuke which is vulnerable to a SQL injection attack. An attacker may use this flaw to gain the control of the database of this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...
Vignette StoryServer < 6.0.4 Arbitrary TCL Code Execution
The remote host is running Vignette StoryServer v6, a web interface to Vignette's Content Management suite. A flaw in this product may allow an attacker to inject arbitrary code in this server. Nessus could not determine the existence of this vulnerability so this might be a false positive...