openSUSE Security Update : libmikmod (libmikmod-570)

Specially crafted XM files or playing mod files with varying number of channels could crash applications using libmikmod CVE-2009-0179, CVE-2007-6720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

XM Easy Personal FTP Service Denial Of Service

!usr/bin/perl -w XM Easy Personal FTP Server 5.x allows remote attackers to cause a denial of service via a "HELP" or "TYPE" command with an overly long argument. Refer: http://secunia.com/advisories/35271/ Original advisory avaiable at:...

XM Easy Personal FTP Server多个FTP命令远程溢出漏洞

BUGTRAQ ID: 35239 XM Easy Personal FTP Server是一款简单易用的个人FTP服务器工具。 如果远程攻击者向XM Easy Personal FTP Server发送了超过4700字节的超长HELP或TYPE FTP命令的话，就可能触发缓冲区溢出，导致服务器崩溃。攻击者必须首先能够登录到服务器才能利用这个漏洞；此外由于没有覆盖寄存器，因此无法执行任意代码。 dxmsoft XM Easy Personal FTP Server 5.7.0 厂商补丁： dxmsoft -------...

[Security] XM Easy Personal FTP Server Multiple DoS vulnerabilities

XM Easy Personal FTP Server Multiple DoS vulnerabilities Credits: NeerajT of Nevis Labs http://www.nevisnetworks.com/services.php?id=10 Date of Discovery: 14-May-2009 Vendor: Dxmsoft URL: http://www.dxm2008.com/ Affected: XM Easy Personal FTP Server 5.7.0 Earlier versions may also be affected...

XM Easy Personal FTP Server DoS

/ XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int srvconnect; int sockaddrlong; struct sockaddrin sockaddrmysocket;...

ASP-Dev XM Event Diary Multiple Vulnerabilities

ASP-Dev XM Events Diary is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ASP-Dev XM Event Diary Multiple Vulnerabilities

The host is running ASP-Dev XM Events Diary and prone to multiple vulnerabilities. Vulnerabilities Insight: - Input passed to the 'cat' parameter in 'default.asp' and 'diaryviewC.asp' are not properly sanitised before being used in SQL queries. - Insufficient access control to the database file...

MikMod Module Player Denial of Service Vulnerability - Linux

MikMod Module Player is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MikMod Module Player Denial of Service Vulnerability (Linux)

This host is installed with MikMod Module Player and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmikmoddosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ MikMod Module Player Denial of Service Vulnerability Linux Authors: Sujit Ghosal Copyright: Copyright c 200...

Improper access control

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb...

CVE-2008-5923

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter...

Sql injection

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter...

CVE-2008-5924

SQL injection vulnerability in diaryviewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5925

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb...

Sql injection

SQL injection vulnerability in diaryviewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5925

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb...

CVE-2008-5923

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter...

CVE-2008-5923

CVE-2008-5923 affects ASP-Dev XM Events Diary (Web app). OpenVAS/OpenVAS-derived data show SQL injection in default.asp (and diary_viewC.asp) where user-supplied input passed to SQL queries via the cat parameter, enabling remote attackers to execute arbitrary SQL. Additional context notes insuffi...

CVE-2008-5924

ASP-Dev XM Event Diary is affected by CVE-2008-5924, a SQL injection in diary_viewC.asp that allows remote attackers to execute arbitrary SQL commands via the cat parameter. The OpenVAS entry corroborates multiple vulnerabilities in the same product, including improper sanitisation of input used ...

CVE-2008-5925

ASP-Dev XM Events Diary has a partial-access control weakness that exposes the diary.mdb database under the web root, allowing remote retrieval via a direct request. Affected component is the diary database/file handling within the web app; underlying issue is insufficient access control leading ...