GLSA-200410-06 : CUPS: Leakage of sensitive information

The remote host is affected by the vulnerability described in GLSA-200410-06 CUPS: Leakage of sensitive information When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile. Impact : A local user could gain knowledge of sensitive...

[Full-Disclosure] Buffer Overflow in SYS_CONTEXT() in Oracle 9i Rel.2

http://www.red-database-security.com/advisory/advisory200409032.htm RDS200409032 - Red-Database-Security GmbH Research Advisory Name Buffer Overflow in SYSCONTEXT in Oracle 9i Rel.2 Systems Affected Oracle9i Rel. 2 Windows platform only Severity Medium Risk Category Buffer Overflow Vendor URL...

[Full-Disclosure] Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i

http://www.red-database-security.com/advisory/advisory200409033.htm RDS200409032 - Red-Database-Security GmbH Research Advisory Name Buffer Overflow in DBMSSYSTEM.KSDWRT in Oracle8i - 9i Systems Affected Oracle 8i - Oracle9i all platforms Severity Medium Risk Category Buffer Overflow/Denial of...

[Full-Disclosure] SQL Injection via CTXSYS.DRILOAD in Oracle 8i/9i

http://www.red-database-security.com/advisory/advisory200409031.htm RDS200409031 - Red-Database-Security GmbH Research Advisory Name SQL Injection via CTXSYS.DRILOAD in Oracle 8i/9i Systems Affected Oracle 8i / Oracle9i all platforms Severity High Risk Category SQL Injection Vendor URL...

[Full-Disclosure] SUSE Security Announcement: kernel (SUSE-SA:2004:028)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: kernel Announcement-ID: SUSE-SA:2004:028 Date: Wednesday, Sept 1st 2004 14:26 MEST Affected products: 8.1, 8.2, 9.0, 9.1 SUSE Linux Database Server, SUSE eMail Server III, 3.1 SUSE Linux Enterprise Server 8, 9 SUSE Linux...

GLSA-200404-21 : Multiple Vulnerabilities in Samba

The remote host is affected by the vulnerability described in GLSA-200404-21 Multiple Vulnerabilities in Samba Two vulnerabilities have been discovered in Samba. The first vulnerability allows a local user who has access to the smbmount command to gain root. An attacker could place a setuid-root...

Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability Revision 1.0 For Public Release 2004 August 27 1000 UTC - ------------------------------------------------------------------------- Contents Summary Affected Products Details Impact...

Cisco Telnet Denial of Service Vulnerability

A specifically crafted Transmission Control Protocol TCP connection to a telnet or reverse telnet port of a Cisco device running Internetwork Operating System IOS® may block further telnet, reverse telnet, Remote Shell RSH, Secure Shell SSH, and in some cases Hypertext Transport Protocol HTTP...

Cisco Security Advisory: Cisco IOS Malformed OSPF Packet Causes Reload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Malformed OSPF Packet Causes Reload Revision 1.0 For Public Release 2004 August 18 15:00 UTC GMT - ---------------------------------------------------------------------------- Contents Summary Affected Products Detai...

[Full-Disclosure] Cisco Security Advisory: Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities Revision 1.0 For Public Release 2004 July 21 at 1600 UTC GMT ----------------------------------------------------------------------...

Cisco CatOS TCP ACK handling vulnerability

Overview A vulnerability in Cisco CatOS may allow a remote attacker to cause a denial of service on an affected device. Description Cisco's CatOS is an operating system that runs on some Cisco Catalyst switch products. A vulnerability in the way that TCP services on CatOS handle malformed...

Cisco IOS fails to properly process solicited SNMP operations

Overview Cisco IOS contains a vulnerability in the processing of solicited Simple Network Management Protocol SNMP operations that may result in memory corruption of the device causing it to reload. Sustained exploitation of this vulnerability could lead to a denial of service condition affect a...

hpjadmadv.txt

Product: HP Web JetAdmin Version 7.5.2546 Others that use this codebase assumed vulnerable Note: Only tested on the Windows Platform. Vulnerability: Denial of Service, Upload Any file to the filesystem to a known location, Write to any file on the file system, Read any file from the filesystem...

[Full-Disclosure] Cisco Security Advisory: Cisco FWSM Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco FWSM Vulnerabilities Revision 1.0 For Public Release 2003 December 15 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software...

Cisco Security Advisory: HTTP GET Vulnerability in AP1x00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: HTTP GET Vulnerability in AP1x00 Revision 1.0 For Public Release 2003 July 28 16:00 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software...

Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerabilities Revision 1.0 For Public Release 2003 May 7 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

Oracle9i Application Server MOD_ORADAV Module vulnerable to DoS

Overview A remotely exploitable denial-of-service vulnerability exists in the Oracle9i Application Server MODORADAV Module. Description Oracle has described this vulnerability as follows:A potential security vulnerability has been discovered in Oracle9i Application Server. A knowledgeable and...

Cisco Security Advisory: Cisco ONS15454 and Cisco ONS15327 Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS15454 and Cisco ONS15327 Vulnerabilities Revision 1.0 For Public Release 2002 October 31 at 1600 UTC ---------------------------------------------------------------------- Contents Summary Affected Products Details...

Cisco Security Advisory: Cisco VPN 5000 Client Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 5000 Client Multiple Vulnerabilities Revision 1.0 For Public Release 2002 September 18 08:00 UTC -0800 ---------------------------------------------------------------------- Contents Summary Affected Products Details...