171 matches found
[ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie
=====BEGIN-SCL-REPORT===== Scovetta Labs Security Advisory Title: WebCalendar: SQL Injection from encoded cookie Status: Public Release Date: 2005-02-16 Package: WebCalendar Vendor: k5n.us - http://www.k5n.us/webcalendar.php Priority: High Vulnerability: SQL Injection Affected Versions:...
HP-UX PHCO_29698 : HP-UX Shells, Local Increase of Privilege, Denial of Service (DoS) (HPSBUX00275 SSRT3618 rev.2)
s700800 11.04 VVOS ksh1 cumulative patch : Shells improperly manage files during operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO29698. The text itself is copyright C Hewlett-Packard Development...
HP-UX Security patch : PHNE_10010
The remote host is missing HP-UX Security Patch number PHNE10010 . Security Vulnerability in the ftpd/kftpd executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17109;...
HP-UX Security patch : PHSS_25786
The remote host is missing HP-UX Security Patch number PHSS25786 . Sec. Vulnerability in dtspcd rev. 3 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16918; scriptversion"1.7";...
Fedora Core 2 : ruby-1.8.1-6 (2004-264)
Thu Aug 19 2004 Akira TAGOH 1.8.1-6 - security fix CVE-2004-0755 - ruby-1.8.1-cgisessionperms.patch: sets the permission of the session data file to 0600. 130063 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
zkfingerd 0.9.1 format string vulnerabilities (#NISR16122002A)
NGSSoftware Insight Security Research Advisory Name: zkfingerd Format String vulnerability Systems: zkfingerd version 0.9.1 and earlier Severity: High Risk Vendor URL: http://sourceforge.net/projects/zkfingerd Author: David Litchfield [email protected] Advisory URL:...
phpGB: cross site scripting bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following cross-site-scripting-bug in phpGB: Details - ------- Product: phpGB Affected Version: 1.10 and maybe all versions before Immune Version: 1.20 OS affected: all OS with php Vendor-URL: http://www.walzl.net Vendor-Status:...
SWServer 2.2 directory traversal bug
Auriemma Luigi, PivX security advisory Application: SWServer http://www.geocities.com/tlhome2000/swserver.html Version: 2.2 and previous Bug: Directory traversal bug Risk high: An attacker can view and "surf" in the directories of the remote server and view all the files in it. Author: Auriemma...
Immunity Canvas: CMSD_XDRARRAY
Name| cmsdxdrarray ---|--- CVE| CVE-2002-0391 Exploit Pack| CANVAS Description| cmsdxdrarray Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46122 CVE Name: CVE-2002-0391 VENDOR: Sun Date public: Jul 30, 2002 CERT Advisory: http://www.cert.org/advisories/CA-2002-25.ht...
[PkC] Advisory #003: micq-0.4.6 remote buffer overflow
/ pkc003.txt / -= SECURITY ADVISORY 003 =- | www.pkcrew.org / | / | | | | | / | | | | | / | | | | / | | / / | | | / | | | | | PkC | | | / | | | | | | || || || / Packet Knights Crew -= SECURITY ADVISORY 003 =- - Vulnerable program: micq-0.4.6 Matt's ICQ clone. Maybe others. - Tested on: Linux/ix86...
