Unknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports. Date published : 2005-06-28 http://freshmeat.net/releases/101529/ http://securitytracker.com/id?1005534
The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument. Date published : 2005-06-28 http://www.securityfocus.com/bid/6107 http://online.securityfocus.com/archive/1/298588
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers....
Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login. Date published : 2005-06-28 http://www.securityfocus.com/bid/6106 http://www.iss.net/security_center/static/10562.php
Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to...
Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) msg, or (4) notice command. Date published : 2005-06-28...
Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. Date published : 2005-06-28 http://www.securityfocus.com/bid/5029 http://packetstormsecurity.nl/0206-exploits/magiccard_vuln.txt
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in...
Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors. Date published : 2005-06-28 http://www.securityfocus.com/bid/5021
Linux kernel 2.4.1 through 2.4.19 sets root’s NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries. Date published : 2005-06-28 http://www.securityfocus.com/bid/5178...
Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname. Date published : 2005-06-28 http://www.securityfocus.com/bid/5629 http://archives.neohapsis.com/archives/bugtraq/2002-09/0032.html
Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name (FQDN) that ends in a "." (dot)....
Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link. Date published : 2005-06-28 http://www.securityfocus.com/bid/5151 http://www.share360.com/products/s360/Release_Notes.html
Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output. Date published : 2005-06-28 http://www.securityfocus.com/bid/5174 http://www.nagios.org/changelog.php