OpenSSL vulnerabilities and new updates for Mar 21, 2004
N-Stalker has made available the latest database update (v123) for N-Stealth Web Security Scanner.
This updates are available for the N-Stealth 5.5 version. If you are currently using an old version, please, contact us at:
E-mail: support@nstalker.com (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)
Download: https://secure.nstalker.com/customercenter/release.php
This release has included the following vulnerabilities:
– Tarantella Enterprise 3.4.0 TTAArchives.CGI Remote Cross-Site Scripting Vulnerability
– Tarantella Enterprise 3.4.0 TTACab.CGI Remote Cross-Site Scripting Vulnerability
– PHP-Nuke Error Manager Module 2.1 Multiple Vulnerabilities
– IBM Lotus Domino HTTP webadmin.nsf Quick Console Cross-Site Scripting Vulnerability
– IBM Lotus Domino HTTP webadmin.nsf Directory Traversal Vulnerability
– Belchior Foundry VCard 2.8 Authentication Bypass Vulnerability
– OpenSSL Denial of Service Vulnerabilities
– JelSoft 3.0 VBulletin ForumDisplay.PHP Cross-Site Scripting Vulnerability
– JelSoft VBulletin 3.0 ShowThread.PHP Cross-Site Scripting Vulnerability
– JelSoft VBulletin 2.3.4 MemberList.PHP Cross-Site Scripting Vulnerability
– Mambo 4.5 Open Source Index.PHP Cross-Site Scripting Vulnerability
– PhpBB 2.0.6c admin_words.php Multiple Vulnerabilities
– Fizmez Web Server Null Connection Denial Of Service Vulnerability
– GNU SPIP 1.7 Unspecified PHP Code Execution Vulnerability
– PHPBB 2.0.6 Search.PHP Search_Results Parameter SQL Injection Vulnerability
– MathoPD Remote Buffer Overflow Vulnerability
– VocalTec VGW4/8 Telephony Gateway Remote Authentication Bypass Vulnerability
– WarpSpeed 4nAlbum 0.92 Module For PHPNuke Multiple Vulnerabilities
– SteelID thePhotoTool Login.ASP SQL Injection Vulnerability
– YABB/YABB SE 1.5.1 Multiple Cross-Site Scripting Vulnerabilites
– Phorum 3.4.6 Multiple Module Cross-Site Scripting Vulnerability
– PHPBB 2.0.6 ViewForum.PHP “topicdays” Cross-Site Scripting Vulnerability
– PHPBB 2.0.6 ViewTopic.PHP “postdays” Cross-Site Scripting Vulnerability
N-Stealth DB General Information
Version: 123
Release Date: 03/21/2004
