security flaw

raddecode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute...

security flaw

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SOCKS dissector...

[Full-Disclosure] RealOne Player local privilege escalation

Greetings, RealOne Player for the UNIX platform, sometimes referred to as the "community supported" realplayer version 9, installs per-user configuration files with group write permissions by default. On most UNIX variants, this is a serious issue as most users belong to the same group and...

e107 website system Vulnerability

Informations : Advisory Name: e107 website system Vulnerability Author: hiruvim [email protected] Discover by: hiruvim [email protected] Website vendor : http://e107.org Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to get MySQL...

ZH2003-11SA (security advisory): Elite News Ver. 1.0.0.0-1.0.0.3 Beta

Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory: http://www.zone-h.org/en/advisories/read/id=2710 Author: Trash-80 -...

Remote code execution in ttCMS <=v2.3

Advisory name: Remote code execution in ttCMS 2.2.0/2.2.1 Application: ttCMS v2.3 and older versions Vendor: www.ttcms.com Status: Vendor was contacted but didn't reply - after posting about another hole on his forums, my account was banned Impact: Attacker can execute arbitrary php code Platform...

security flaw

The default servlet org.apache.catalina.servlets.DefaultServlet in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet...

security flaw

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA e.g. sendmail in the 5th argument to mail, altering MTA behavior and possibly executing commands...

security flaw

Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code while Ethereal is parsing keysyms...

icecast server 1.3.12 - Directory Traversal Information Disclosure

source: https://www.securityfocus.com/bid/5189/info Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms. An attacker may exploit a directory traversal vulnerability in Icecast server to determine the existanc...

DistCC Daemon Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

DistCC Daemon - Command Execution (Metasploit)

$Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Irix LPD tagprinter - Command Execution (Metasploit)

Irix LPD tagprinter - Command Execution Metasploit $Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Irix LPD tagprinter - Command Execution (Metasploit)

$Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

BOA Web Server 0.94.8.2 - Arbitrary File Access

BOA Web Server 0.94.8.2 - Arbitrary File Access ID: S21SEC-005-en Title: Vulnerability in BOA web server v0.94.8.2 Date: 03/10/2000 Status: Vendor contacted, patch available Scope: Arbitrary file access Platforms: Unix Author: llmora Location: http://www.s21sec.com/en/avisos/s21sec-005-en.txt...

Htgrep CGI Arbitrary File Viewing Vulnerability

Software: Htgrep URL: http://www.iam.unibe.ch/scg/Src/Doc/ Version: All Versions Platforms: Unix maybe Winnt? Author status: Notified Summary: Any remote user can view arbitrary files on the system with the privileges of the web user Vulnerability: The CGI allows a user to specify a header and...

netsurfer.txt

Software: Netsurfer for UNIX version? Platforms: UNIX various ISPs Problem: Any local user can obtain passwords and credit card numbers by elsewhere A problem exists in Netsufer's, Inc. Netsurfer software see www.netsurfer.com that allows the average local user anyone in the user group to obtain...

fwtk.gauntlet.random.seed.txt

Date: Fri, 16 Apr 1999 15:36:27 -0500 From: [email protected] To: [email protected] Subject: FWTK, Gauntlet 'random seed' security problem Summary A 'random seed' problem in lib/rand.c affects all local challenge-response authentication on FWTK and Gauntlet. Many services have support available...