6347 matches found
Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption
source: https://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence attributes such as the artist, song...
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...
[SA13438] Winmail Server Installation Path Disclosure Weakness
TITLE: Winmail Server Installation Path Disclosure Weakness SECUNIA ADVISORY ID: SA13438 VERIFY ADVISORY: http://secunia.com/advisories/13438/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Winmail Server 4.x http://secunia.com/product/4370/ DESCRIPTION...
Cherokee Web Server Port Bind Privilege Drop Weakness
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to remote command execution due to a lack of web requests sanitization, especially shell metacharacters. Additionally, this version fails to drop root privileges after it binds to...
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an...
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation
source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present web pages to users th...
Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation
Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation source: https://www.securityfocus.com/bid/11565/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue is due to a failure of the affected application to properly handle specially crafted HTML anch...
CVE-2004-0979: Undefined Security Weakness
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration...
Microsoft Windows XP - Weak Default Configuration
Microsoft Windows XP - Weak Default Configuration // source: https://www.securityfocus.com/bid/11410/info Microsoft Windows XP Service Pack 2 is reported prone to a weak default configuration vulnerability. Internet Connection Firewall ICF includes functionality that controls what binaries are...
AJ-Fork Permission Weakness Information Disclosure
Binary data 2342.prm...
Debian DSA-269-1 : heimdal - Cryptographic weakness
A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for...
Debian DSA-429-1 : gnupg - cryptographic weakness
Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing. This update disables the use of this type of key. %NASLMINLEVEL 70300 C Tenable Netwo...
Debian DSA-273-1 : krb4 - Cryptographic weakness
A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for...
Mozilla / Firefox enablePrivilege Dialog Weakness (deprecated)
Binary data 2295.prm...
IlohaMail Unspecified Database Password Disclosure Weakness
The target is running at least one instance of IlohaMail version 0.6 or earlier. Such versions suffer from a potential password disclosure problem when databasae information is not saved in the session table. Nessus has determined the vulnerability exists on the target simply by looking at the...
CVE-2003-0094: Undefined Security Weakness
A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed...
Microsoft Internet Explorer 6 - Resource Detection
source: https://www.securityfocus.com/bid/11026/info Microsoft Internet Explorer is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is accessible within the same domain and change its URI...
Mozilla onkeypress Function XPI Installation Weakness (deprecated)
Binary data 1317.prm...