[SECURITY] Fedora 16 Update: ypserv-2.29-1.fc16

The Network Information Service NIS is a system that provides network information login names, passwords, home directories, group information to all of the machines on a network. NIS can allow users to log in on any machine on the network, as long as the machine has the NIS client programs runnin...

[SECURITY] Fedora 18 Update: ypserv-2.29-1.fc18

The Network Information Service NIS is a system that provides network information login names, passwords, home directories, group information to all of the machines on a network. NIS can allow users to log in on any machine on the network, as long as the machine has the NIS client programs runnin...

OpenSSH < 3.2.3 YP Netgroups Authentication Bypass

According to its banner, the version of OpenSSH running on the remote host is older than 3.2.3. It therefore may be affected by an authentication bypass issue. On systems using YP with netgroups, sshd authenticates users via ACL by checking for the requested username and password. Under certain...

Phpcms 2008 yp/job.php脚本SQL盲注漏洞

Phpcms网站管理系统是国内主流CMS系统之一 Phpcms所使用的yp/job.php脚本的urldecode函数没有正确地过滤用户所提交的$genre参数便在SQL查询中使用，远程攻击者可以通过提交恶意请求执行SQL注入攻击。以下是有漏洞的PHP代码段： switch$action case 'list': $catid = intval$catid; $head'keywords' .= '职位列表'; $head'title' .= '职位列表'.''.$PHPCMS'sitename'; $head'description' .=...

Improper access control

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

CVE-2009-4766

The CVE-2009-4766 entry concerns YP Portal MS-Pro Surumu (MS-Pro Portal Scripti) versions 1.0 and 1.2. The issue is improper access control that stores sensitive data under the web root, enabling remote attackers to retrieve the database file galeri/database/db.mdb via a direct request. Connected...

CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

YP Portal MS-Pro Surumu 1.0 - Database Disclosure

YP Portal MS-Pro Surumu 1.0 - Database Disclosure ======================================================================================== | Title : YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El...

YP Portal MS-Pro Surumu 1.0 Database Disclosure

======================================================================================== | Title : YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | DAte : 16/12/200...

YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability

Exploit for unknown platform in category web applications ===================================================== YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability =====================================================...

YP Portal MS-Pro Surumu 1.0 - Database Disclosure

======================================================================================== | Title : YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | DAte : 16/12/200...

SLES9: Security update for Security update PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-modphp4 apache2-modphp4 modphp4 modphp4-apache2 modphp4-core modphp4-servlet php4 php4-bcmath php4-bz2 php4-calendar php4-ctype php4-curl php4-dba...

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-gmp php4-ldap php4-xslt php4-servlet php4-ftp php4-exif php4-devel php4-yp php4-shmop php4-iconv php4 php4-pear php4-sysvshm php4-mimemagic php4-curl...

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-zlib php4-shmop php4-ftp php4-filepro php4-mcrypt php4-servlet php4-gmp php4-bz2 php4-snmp php4-mysql php4-mimemagic php4 php4-pgsql modphp4-servlet...

RedHat Security Advisory RHSA-2009:1066

The remote host is missing updates announced in advisory RHSA-2009:1066. A server-side code injection flaw was found in the SquirrelMail mapypalias function. If SquirrelMail was configured to retrieve a user's IMAP server address from a Network Information Service NIS server via the mapypalias...

Solaris Update for /usr/lib/netsvc/yp/ypbind 110323-02

Check for the Version of /usr/lib/netsvc/yp/ypbind OpenVAS Vulnerability Test Solaris Update for /usr/lib/netsvc/yp/ypbind 110323-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for /usr/lib/netsvc/yp/ypbind 110322-02

Check for the Version of /usr/lib/netsvc/yp/ypbind OpenVAS Vulnerability Test Solaris Update for /usr/lib/netsvc/yp/ypbind 110322-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for /usr/lib/netsvc/yp/ypbind 110322-02

Check for the Version of /usr/lib/netsvc/yp/ypbind OpenVAS Vulnerability Test Solaris Update for /usr/lib/netsvc/yp/ypbind 110322-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for /usr/lib/netsvc/yp/ypbind 110323-02

Check for the Version of /usr/lib/netsvc/yp/ypbind OpenVAS Vulnerability Test Solaris Update for /usr/lib/netsvc/yp/ypbind 110323-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...