Technical Cyber Security Alert TA05-224A - VERITAS Backup Exec Remote Agent for Windows Servers uses hard-coded administrative authentication credentials. An attacker with knowledge of these credentials and access to the Remote Agent could retrieve arbitrary files from a vulnerable system.
9dde9e5a88a8e6cb42fe843651d1b723670fc7ee22cc88d40f41b27bdceea01fThe Incident Response Collection Report is a script to call a collection of tools that gathers and/or analyzes data on a Microsoft Windows system. You can think of this as a snapshot of the system in the past. Most of the tools are oriented towards data collection rather than analysis.
32be1c0278a380438592db2f097bfc25dc1bc1a3bfcb2bd7f4d5e0b167ec3b4cMicrosoft Windows Plug-and-Play remote overflow universal exploit that is related to MS05-039. Vulnerable systems include: Microsoft Windows Server 2003 SP1, Microsoft Windows XP SP1 and SP2, and Microsoft Windows 2000 SP4.
d4d34022865fee0d2c172e8b76760414d4e039a1695053f89ac862f393a57700Due to the logs directory being 777 by default, Kaspersky AntiVirus 5.5 is susceptible to a local root exploit via a symlink attack. Details are provided.
4221d11c999895f3600e0c16961946b2c0424f23876f1d8b87d18a563fb9fbfaDenial of service exploit for the Grandstream Budge Tone 101/102 VOIP phone that sends UDP packets larger than 65534 bytes in size to port 5060.
c0ade1d951f810b48782c25899321731bff97b1a0de4e2f6dffa87086b7601a8It is possible to denial of service the Grandstream Budge Tone 101/102 VOIP phone by sending a UDP packet greater than 65534 bytes to port 5060.
971cc3bd262ee40b619f72fff70b663892cee3f5753cc1d34ac499a8a70ac909Debian Security Advisory DSA 774-1 - Edward Shornock discovered a bug in the UIDL handling code of fetchmail, a common POP3, APOP and IMAP mail fetching utility. A malicious POP3 server could exploit this problem and inject arbitrary code that will be executed on the victim host. If fetchmail is running as root, this becomes a root exploit.
e30a4b05419887264e05a08c16a5de24bfb39591623bf714786afdb00b2b9703Multiple SQL injection vulnerabilities exist in MyBB RC 4.
1f5543f0b97a845725b1a3264069d358965dd6a36adb9d7fe85584572fe722d9Claroline 1.6.1 is vulnerable to multiple directory traversal attacks. Teacher access is needed for successful exploitation.
e9fd260847e06c5f1d63952a7a8de9fb08e7390eaf4354a23a12b802ed02846aSecunia Security Advisory - Peter Winter-Smith of NGSSoftware has reported a vulnerability in Novell eDirectory, which can be exploited by malicious people to compromise a vulnerable system.
dbb8ea818b850b46a002dde2a9afe2fd7ead8bec20bb77a72e88be877152e631Secunia Security Advisory - rgod has discovered a weakness in PHP Designer 2005, which can be exploited by malicious people to hide the contents of certain source files.
7351e5a32f5482526b0129a91df5be5bde58acdd6823760621ec30cec44a73b1Secunia Security Advisory - A vulnerability has been reported in VERITAS Backup Exec, which can be exploited by malicious people to bypass certain security restrictions.
bb39f1a969c73661c11b7f48a91848d1f7aa0097bef1b7e9d79ce35f20d168a5Secunia Security Advisory - Florian Weimer has reported a vulnerability in the Linux kernel, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
c849e41fa2cd0a4dc5c036d9e18ed6a4cd0ea75dc7077bb2f6eb10c708f9ccf5Secunia Security Advisory - Josh Zlatin-Amishav has reported a vulnerability in Wyse Winterm, which can be exploited by malicious people to cause a DoS (Denial of Service).
10d997704bf8a0848ae8e1eb226026072e1a06f830cfcc5e229d4290236e4340Secunia Security Advisory - Sun Microsystems has acknowledged some vulnerabilities in the MySQL package bundled with Solaris, which can be exploited by malicious users to bypass certain security restrictions, cause a DoS (Denial of Service), or compromise a vulnerable system.
d06cd5481bc8e99a5250c3cd262c2e6ccf1400dd5595e7adb9bc511205868e78Secunia Security Advisory - Alexander Heidenreich has discovered a vulnerability in FUDforum, which can be exploited by malicious people to bypass certain security restrictions.
d5c6708763f0af98464da86a1b6d6dcdfdb7e56695d47bee16f055db4fc36878Secunia Security Advisory - rgod has discovered a weakness in Dev-PHP, which can be exploited by malicious people to hide the contents of certain source files.
8d052c2bbf4a656588dd4330a089696b072cfc0943a0b69ed5219ad812e5b1e0Secunia Security Advisory - rgod has discovered a weakness in Bloodshed Dev-Pascal, which can be exploited by malicious people to hide the contents of certain source files.
f43d367f90419ca4fa6ee1cd02ecc00fd1633db78e6965664cde2590aa3d8aed
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed