openSUSE Security Update : apport (apport-816)

The apport crash watcher / handler suite contains a cron job that cleanes the world writeable /var/crash directory unsafely, allowing local attackers to remove random files on the system. CVE-2009-1295 This update fixes this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

openSUSE Security Update : valgrind (valgrind-321)

valgrind reads a file .valgrindrc in the current directory. Therefore local users could place such a file a world-writable directory such as /tmp and influence other users' valgrind when it's executed there CVE-2008-4865. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

World in Conflict 1.0.1 - Typecheck Remote Denial of Service

World in Conflict 1.0.1 - Typecheck Remote Denial of Service source: https://www.securityfocus.com/bid/35751/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash th...

World in Conflict 1.0.1 - Typecheck Remote Denial of Service

source: https://www.securityfocus.com/bid/35751/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash the affected application, denying service to legitimate users...

Unfixed XSS vulnerability at www.worldmissphotogenic.com

Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.worldmissphotogenic.com, which at the time of submission ranked 12938536 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010...

Pixelactivo 3.0 - Authentication Bypass

Pixelactivo 3.0 - Authentication Bypass Pixelactivo 3.0 Auth bypass Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.pixelactivo.com Special Thx: Snakespc Exploit: ------ Username: adminname' or '1=1 Password: ThE g0bL!N Demo: ----...

DEBIAN-CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

CVE-2009-1631

The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files...

Fedora Core 10 FEDORA-2009-3761 (prewikka)

The remote host is missing an update to prewikka announced via advisory FEDORA-2009-3761. OpenVAS Vulnerability Test $Id: fcore20093761.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3761 prewikka Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-3931 (prelude-manager)

The remote host is missing an update to prelude-manager announced via advisory FEDORA-2009-3931. OpenVAS Vulnerability Test $Id: fcore20093931.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3931 prelude-manager Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-3761 (prewikka)

The remote host is missing an update to prewikka announced via advisory FEDORA-2009-3761. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 9 FEDORA-2009-4044 (prelude-manager)

The remote host is missing an update to prelude-manager announced via advisory FEDORA-2009-4044. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora 10 : prelude-manager-0.9.14.2-2.fc10 (2009-3931)

The configuration file of prelude-manager contains a database password and is world readable. This update restricts permissions to the root account. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Fedora 9 : prewikka-0.9.14-2.fc9 (2009-3789)

The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 10 : ntop-3.3.8-3.fc10 (2009-2805)

ls -lh /var/log/ntop/access.log -rw-rw-rw- 1 root root 0 2009-02-04 11:53 /var/log/ntop/access.log Fixed. log world-writable when the --access-log- file option is used. This option is not used in Fedora or Red Hat by default and is not noted in the configuration file. It is, however, noted in the...

Fedora Core 10 FEDORA-2009-2805 (ntop)

The remote host is missing an update to ntop announced via advisory FEDORA-2009-2805. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-6713

World in Conflict WIC 1.008 and earlier allows remote attackers to cause a denial of service access violation and crash via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference...

Null pointer dereference

World in Conflict WIC 1.008 and earlier allows remote attackers to cause a denial of service access violation and crash via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference...