370 matches found
dnsmasq security update
2.45-1.el5.1 - update to new upstream version - fixes for CVE-2008-1447/CERT VU800113 - Resolves: rhbz454869...
SOL8939 - SNMPv3 HMAC verification vulnerability CVE-2008-0960 - VU#878044
Information about this advisory is available at the following locations: F5 Product Development tracked this issue as CR99838 for BIG-IP LTM, GTM, ASM, PSM, Link Controller, and WebAccelerator and it was fixed in BIG-IP 9.4.6 and 10.0.0. For information about upgrading, refer to the BIG-IP LTM,...
SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
This security advisory describes a BIND 8 and BIND 9 vulnerability which allows remote attackers to spoof DNS traffic using cache poisoning techniques against recursive resolvers. With the exception of FirePass, the F5 products listed as affected in this security advisory run a version of BIND th...
SNMP Version 3 Authentication Vulnerabilities
Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 SNMPv3 feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network informati...
[oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing
2008/06/09 2008-006 multiple SNMP implementations HMAC authentication spoofing Description: Some SNMP implementations include incomplete HMAC authentication code that allows spoofing of authenticated SNMPv3 packets. The authentication code reads the length to be checked from sender input, this...
Security fix for the ALT Linux 5 package bind version 9.3.5-alt2
June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...
Security fix for the ALT Linux 8 package bind version 9.3.5-alt2
June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...
Security fix for the ALT Linux 6 package bind version 9.3.5-alt2
June 6, 2008 Dmitry V. Levin 9.3.5-alt2 - Updated to 9.3.5-P1 release fixes VU800113/CVE-2008-1447...
MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2008-002 MIT krb5 Security Advisory 2008-002 Original release: 2008-03-18 Last update: 2008-03-18 Topic: array overrun in RPC library used by kadmind CVE-2008-0947, CVE-2008-0948 VU374121 Use of high-numbered file descriptors in the RPC...
joomlacandle-sql.txt
JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT : index.php?option=comcandle&task=content&cID=-9999//union//select//0x3a,username,0x3a,password,0x3a,0x3a//from//josusers/ S@BU...
Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability
No description provided by source. JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT :...
Joomla! Component Candle 1.0 - cid SQL Injection
Joomla! Component Candle 1.0 - cid SQL Injection JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT :...
Joomla! Component Candle 1.0 - 'cid' SQL Injection
JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT : index.php?option=comcandle&task=content&cID=-9999//union//select//0x3a,username,0x3a,password,0x3a,0x3a//from//josusers/ S@BU...
Sql injection
SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-6168
SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-6168
SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-6168
CVE-2007-6168 affects VU Case Manager: SQL injection in default.asp (Login Page) via the username parameter, enabling remote SQL execution. This is a different vector from CVE-2007-6143, which uses the password parameter. No remediation or exploit details are provided in the supplied documents.
CVE-2007-6168: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...