6417 matches found
Gentoo Security Advisory GLSA 200807-08 (bind)
The remote host is missing updates announced in advisory GLSA 200807-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-4208: Undefined Security Weakness
Unspecified vulnerability in OSADS Alliance Database before 2.1 has unknown impact and attack vectors, possibly related to includes/functions.php, a different issue than CVE-2006-2874...
Spree Hash Restriction Weakness URL Parsing Order State Value Manipulation
Spree contains a hash restriction weakness that occurs when parsing a modified URL. This may allow an attacker to manipulate order state values...
CVE-2008-4095: Undefined Security Weakness
Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vectors, different vulnerabilities than CVE-2007-6713...
CVE-2008-4111: Undefined Security Weakness
Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors...
Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Joomla Weak Random Password Reset Token Vulnerability Release Date: 2008/09/11 Last Modified: 2008/09/11 Author: Stefan Esser stefan.esseratsektioneins.de Application: Joomla = 1.5....
Apple Bonjour for Windows mDNSResponder伪造DNS应答漏洞
BUGTRAQ ID: 31093 CVE ID：CVE-2008-3630 CNCVE ID：CNCVE-20083630 Apple Bonjour for Windows是一款苹果为基于组播域名服务multicast DNS的开放性零设置网络标准所应用的程序。 Apple Bonjour for Windows mDNSResponder的DNS协议实现存在弱点，远程攻击者可以利用漏洞伪造DNS应答，导致网络重定向，可触发中间人等攻击。 Bonjour for Windows提供零配置网络，多播DNS和网络服务发现，也提供使用Bonjour...
CVE-2008-4057: Undefined Security Weakness
Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and attack vectors, related to a "serious security problem."...
Unfixed XSS vulnerability at www.posteritati.com
Security researcher holisticinfosec, has submitted on 09/05/2008 a cross-site-scripting XSS vulnerability affecting www.posteritati.com, which at the time of submission ranked 427822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. I...
HP-UX ftpd PAM Authentication Configuration Weakness Authentication Bypass
According to its banner, the version of the HP-UX FTP server running on the remote host is at a patch level before PHNE38458. Such versions reportedly contain a vulnerability that in certain account configurations could be exploited by an anonymous remote attacker to gain privileged access. Note...
CVE-2008-3653: Undefined Security Weakness
Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors...
Spree Hardcoded config.action_controller_session Hash Value Cryptographic Protection Weakness
Spree contains a hardcoded flaw related to the config.actioncontrollersession hash value. This may allow an attacker to more easily bypass cryptographic protection...
PowerDNS Authoritative Server Malformed Query Cache Poisoning Weakness
The remote DNS drops malformed queries. If it is not just a resolver and serves a domain name, this may help poisoning the cache of other DNS resolvers. PoweDNS 2.9.21 and earlier are known to exhibit this behavior. Note that this does not mean that this server would be vulnerable to cache...
GLSA-200808-03 : Mozilla products: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200808-03 Mozilla products: Multiple vulnerabilities The following vulnerabilities were reported in all mentioned Mozilla products: TippingPoint's Zero Day Initiative reported that an incorrect integer data type is used as a CSS...
CVE-2008-3499: Undefined Security Weakness
Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors...
.svn/entries Disclosed via Web Server
The web server on the remote host allows read access to '.svn/entries' files. This exposes all file names in your svn module on your website. This flaw can also be used to download the source code of the scripts PHP, JSP, etc... hosted on the remote server. %NASLMINLEVEL 70300 Changes by Tenable ...
CVE-2008-3453: Undefined Security Weakness
Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files."...
CVE-2008-3376: Undefined Security Weakness
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...
Debian DSA-1619-1 : python-dns - DNS response spoofing
Multiple weaknesses have been identified in PyDNS, a DNS client implementation for the Python language. Dan Kaminsky identified a practical vector of DNS response spoofing and cache poisoning, exploiting the limited entropy in a DNS transaction ID and lack of UDP source port randomization in many...