1072 matches found
CVE-2011-1707: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs parameter in a printer-url...
CVE-2011-1708: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted op-printer-list-all-jobs cookie...
PT-2011-3308
Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.64 Description The issue is related to a stack-based buffer overflow in the nipplib.dll component. It can be exploited by remote attackers through a crafted op-printer-list-all-jobs parameter in a...
PT-2011-3309
Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.64 Description The issue is related to a stack-based buffer overflow in the nipplib.dll component. This can be exploited by remote attackers through a crafted op-printer-list-all-jobs cookie, potentiall...
Novell iPrint op-printer-list-all-jobs cookie Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the nipplib componen...
[SECURITY] Fedora 15 Update: gnash-0.8.9-0.1.20110312git.fc15
Gnash is capable of reading up to SWF v9 files and op-codes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...
UConn Co-op website hacked !
Storrs : A computer hacker accessed the customer database of HuskyDirect.com, a website that sells sports paraphernalia from the UConn Co-op, prompting the store to order the vendor that manages the site to take it down. The Co-op announced Tuesday that it has notified law enforcement of the...
Linux Kernel 2.6.36-rc1 (Ubuntu 10.04 2.6.32) - CAN BCM Local Privilege Escalation
Linux Kernel 2.6.36-rc1 Ubuntu 10.04 2.6.32 - CAN BCM Local Privilege Escalation / i-CAN-haz-MODHARDEN.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2959 Ben Hawkes discovered an integer overflow in the Controller Area Network CAN...
CVE-2010-1527: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action...
CVE-2010-2007: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in LetoDMS formerly MyDMS 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use 1 op/op.EditUserData.php, 2 op/op.UsrMgr.php, 3 out/out.RemoveVersion.php, 4 op/op.RemoveFolder.php, 5...
CVE-2010-2006: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...
Calendarix 0.8.20071118 - SQL Injection
Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...
CVE-2009-3815: Exposure of Sensitive Information to an Unauthorized Actor
RunCMS 2M1, when running with certain errorreporting levels, allows remote attackers to obtain sensitive information via 1 the op parameter to modules/contact/index.php or 2 uid parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a ca...
Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...
openSUSE 10 Security Update : kernel (kernel-5700)
The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...
Multiple vulnerabilities in Envolution
Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных уязвимостях в системе Envolution, в частности Insuficient Anti-automation и Cross-Site Scripting. Insuficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...
CVE-2008-3229
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable...
CVE-2008-3229
The CVE-2008-3229 entry describes a stack-based buffer overflow in op before Changeset 563 when xauth support is enabled, allowing local users to gain privileges via a long XAUTHORITY environment variable. The connected records confirm the basic cause and impact (local privilege escalation) but d...
OP XAUTHORITY变量本地特权提升漏洞
BUGTRAQ ID: 30226 CNCAN ID：CNCAN-2008071606 OP是一款类似sudo的可替代程序。 OP处理XAUTHORITY变量存在缓冲区溢出，本地攻击者可以利用漏洞提升特权。 当OP使用--enable-xauth配置，并在op.conf中使用xauth配置选项，提交超长数据作为XAUTHORITY变量数据,可触发缓冲区溢出，以高权限执行任意代码，提升特权。 op 1.32 可参考如下安全补丁： http://swapoff.org/changeset/563...