SIGMA Lite & Lite + Security Vulnerabilities

CVE-2007-4845

Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid...

Sql injection

Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid...

CVE-2007-4845

Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid...

CVE-2007-4845

Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid...

RW::Download 2.0.3 lite (index.php dlid) Remote SQL Injection Vuln

No description provided by...

RW::Download 2.0.3 lite (index.php dlid) Remote SQL Injection Vuln

Exploit for unknown platform in category web...

rwdownload-sql.txt

...

RW::Download 2.0.3 lite - index.php?dlid SQL Injection

RW::Download 2.0.3 lite - index.php?dlid SQL...

RW::Download 2.0.3 lite - 'index.php?dlid' SQL Injection

...

Hexamail POP3服务器远程堆溢出漏洞

BUGTRAQ ID: 25496 Hexamail Server是一款高级的邮件服务器，支持所有的标准邮件协议。 Hexamail Server的POP3服务器在处理超长畸形的USER命令时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向服务器提交了带有超长参数的USER命令的话，就可以触发堆溢出，导致拒绝服务或执行任意指令。 Hexamail Hexamail Server 3.0.0.001 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Buffer overflow

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER...

CVE-2007-4646

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER...

CVE-2007-4646

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER...

CVE-2007-4646

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER...

hexamail-dos.txt

...

Hexamail Server 3.0.0.001 (pop3) pre-auth Remote Overflow PoC

No description provided by...

Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)

...

Hexamail Server 3.0.0.001 - pop3 Remote Overflow (PoC)

Hexamail Server 3.0.0.001 - pop3 Remote Overflow...

Hexamail Server 3.0.0.001 (pop3) pre-auth Remote Overflow PoC

Exploit for unknown platform in category dos /...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type...

Type confusion

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type...

X-Lite Missing Content-Type DOS PoC

No description provided by...

CounterPath X-Lite 3.x SIP phone Remote Denial of Service Exploit

No description provided by...

CounterPath X-Lite / WengoPhone SIP softphone DoS

Crash on missed Content-Type field in INVITE or MESSAGE...

CounterPath X-Lite SIP phone Remote Denial of Service vulnerability

Title CounterPath X-Lite SIP phone Remote Denial of Service vulnerability Date 10 August 2007 Affected Software X-Lite versions 3.x (tested on 3.0 34025) Maybe eyeBeam also ;) Overview X-Lite by CounterPath Solutions, Inc. is a free and wild used SIP based softphone. More information about X-Lite ....

counterpath-dos.txt

...

CounterPath X-Lite 3.x SIP phone Remote Denial of Service Exploit

Exploit for unknown platform in category dos /...

CounterPath X-Lite 3.x - SIP phone Remote Denial of Service

CounterPath X-Lite 3.x - SIP phone Remote Denial of...

CounterPath X-Lite 3.x - SIP phone Remote Denial of Service

...

Design/Logic Flaw

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other...

CVE-2007-4185

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other...

CVE-2007-4185

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other...

CVE-2007-4185

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other...

joomla-sql.txt

...

Joomla multiple vulerabilities

Hello Joomla multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Affected Versions 1.0.X -> tested on 1.0.12 and 1.5 maybe affected -> not tested but probebly affected sql injection...

FreeBSD : vim -- Command Format String Vulnerability (1ed03222-3c65-11dc-b3d3-0016179b2dd5)

A Secunia Advisory reports : A format string error in the 'helptags_one()' function in src/ex_cmds.c when running the 'helptags' command can be exploited to execute arbitrary code via specially crafted help...

FreeBSD : mutt -- buffer overflow vulnerability (863f95d3-3df1-11dc-b3d3-0016179b2dd5)

Securityfocus reports : Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation. An attacker can exploit this issue to execute arbitrary code with the with the privileges of the victim. Failed...

vim -- Command Format String Vulnerability

A Secunia Advisory reports: A format string error in the "helptags_one()" function in src/ex_cmds.c when running the "helptags" command can be exploited to execute arbitrary code via specially crafted help...

Design/Logic Flaw

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

Design/Logic Flaw

The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

CVE-2007-3689

The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

CVE-2007-3690

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

CVE-2007-3690

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

CVE-2007-3689

The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

CVE-2007-3690

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

CVE-2007-3689

The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL...

FreeBSD : wireshark -- Multiple problems (7fadc049-2ba0-11dc-9377-0016179b2dd5)

wireshark Team reports : It may be possible to make Wireshark or Ethereal crash or use up available memory by injecting a purposefully malformed packet onto the wire or by convincing someone to read a malformed packet trace...

Sql injection

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to (1) login.php, (2) auth.php, and (3) subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by...