Oracle Database Multiple Remote Vulnerabilities (Mar 2005)

The remote Oracle Database, according to its version number, contains a remote command execution vulnerability that may allow an attacker who can execute SQL statements with certain privileges to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. i...

[SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 543-1 [email protected] http://www.debian.org/security/ Martin Schulze August 31st, 2004 http://www.debian.org/security/faq -...

PHP < 4.3.2 Multiple Function Remote Overflows

Binary data 1484.prm...

MyServer 0.6.2 math_sum.mscgi Multiple Vulnerabilities

The sample CGI mathsum.mscgi is installed on the remote web server. The remote version of this CGI contain several issues which may allow an attacker to execute a cross-site scripting attack, to disable the remote server remotely or to execute arbitrary code with the privileges of the server...

[SECURITY] [DSA 532-1] New libapache-mod-ssl packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 532-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 22nd, 2004 http://www.debian.org/security/faq -...

Fedora Core 1 : neon-0.24.5-1 (2004-103)

Multiple format string vulnerabilities in neon 0.24.4 and earlier allow remote malicious WebDAV servers to execute arbitrary code. Updated packages were made available in April 2004 however the original update notification email did not make it to fedora-announce-list at that time. Note that...

FreeBSD : pine remotely exploitable vulnerabilities (151)

The following package needs to be updated: iw-pine %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg39bd57e65d8311d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

[SECURITY] [DSA 526-1] New webmin packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 526-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 3rd, 2004 http://www.debian.org/security/faq -...

Rlpr 2.0 - 'msg()' Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10578/info It is reported that rlpr is prone to multiple vulnerabilities. These vulnerabilities can allow a remote attacker to execute arbitrary code in order to gain unauthorized access. The application is affected by a format string vulnerability. This...

[SECURITY] [DSA 519-1] New CVS packages fix several potential security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 519-1 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [ GLSA 200405-17 ] Multiple vulnerabilities in metamail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

Exim < 3.36 / 4.33 Multiple Remote Overflows

The remote version of Exim has multiple remote stack-based buffer overflow vulnerabilities when header syntax checking is enabled. It should be noted that this is not the default configuration. A remote attacker could exploit this to execute arbitrary code. C Tenable Network Security, Inc...

Remote Format String Vulnerabilities in eXtremail

Package: eXtremail Auth: http://www.extremail.com/ Versions: 1.5.9 current release Vulnerability: Format String What’s eXtremail: eXtremail is a Unix mail server that supports SMTP/POP3/IMAP protocols. It includes support for virtual domains, spoofing attack ,SSL connection and Antivirus checking...

[Full-Disclosure] [SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 485-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...

ADA.image.txt

hello, Advisory for ADA Image Server ImgSvr 0.4. ADA Image Server ImgSvr 0.4 Multiple vulnerabilities Release Date: April 3, 2004 Severity: High Remote Code Execution Vendor: sourceforge.net/projects/adaimgsvr/ Services Affected: http service 1234 Description of the product: ADA Image Server is a...

Neon WebDAV Client Library 0.2x - Format String

source: https://www.securityfocus.com/bid/10136/info It has been reported that the Neon client library is prone to multiple remote format string vulnerabilities. This issue is due to a failure of the application to properly implement format string functions. Ultimately this vulnerability could...

TikiWiki Project 1.8 - 'tiki-switch_theme.php?theme' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

lcdproc lcdd 0.x4.x - Multiple Vulnerabilities

lcdproc lcdd 0.x4.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10085/info LCDproc Server LCDd has been reported to be prone to multiple remote vulnerabilities. The first issue is reported to exist in the parseallclientmessages function of parse.c, and is due to a lack of...

CVE-2004-0246

Multiple PHP remote file inclusion vulnerabilities in 1 fonctions.lib.php, 2 dernierscommentaires.php, and 3 admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter...

[SECURITY] [DSA 448-1] New pwlib packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 448-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 22nd, 2004 http://www.debian.org/security/faq -...