[ISecAuditors Security Advisories] Oracle Reports Web Cartridge (RWCGI60) vulnerable to XSS

============================================= INTERNET SECURITY AUDITORS ALERT 2007-001 - Original release date: January 17, 2007 - Last revised: January 17, 2007 - Discovered by: Vicente Aguilera Diaz - Severity: 3/5 ============================================= I. VULNERABILITY...

Fedora Core 5 : krb5-1.4.3-5.1 (2006-905)

This update addresses MITKRB-SA-2006-001. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

About the security content of AirPort Update 2006-001 and Security Update 2006-005

About the security content of AirPort Update 2006-001 and Security Update 2006-005 This document describes Security Update 2006-005 and the security content of AirPort Update 2006-001, which can be downloaded and installed via Software Update preferences, or from Apple Downloads. For the protecti...

Microsoft Windows XP/2003 Picture and Fax Viewer / Wine / ME code execution

Buffer overflow on parsing WMF metafiles. It may be used for silent Spyware/Trojan installation with Internet Explorer or another browser and also with Lotus Notes. There are vulnerabilities not covered by MS06-001...

Buffer overflow

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an...

CVE-2006-0396

The CVE-2006-0396 issue is a buffer overflow in Apple Mail on Mac OS X 10.4 (up to 10.4.5) triggered by a long Real Name field in an AppleDouble-formatted attachment, allowing remote code execution when a user opens a crafted attachment. The root cause is lack of validation of MIME/AppleDouble co...

CVE-2006-0396

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an...

Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow

!/usr/bin/perl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Mail.app Version 2.0.7 746.2 on OSX 10.4.5 Build 8H14 + Security Update 2006-001 PowerPC v1.0 RFC-1740 MIME-based Mac file buffer overflow AppleSingle file header: 4 byte magic number4 byte versi...

DCP Portal: Multiple XSS Vulnerabilities

=========================================================== DCP Portal: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0603-001, March 9, 2006 =========================================================...

iDefense Security Advisory 03.02.06: Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability

Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability iDefense Security Advisory 03.02.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399 March 02, 2006 I. BACKGROUND Mac OS X is an operating system for the Apple family of microcomputers. More information is...

Mac OS X Multiple Vulnerabilities (Security Update 2006-001)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...

NetBSD Security Advisory 2006-001: Kernfs kernel memory disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2006-001 ================================= Topic: Kernfs kernel memory disclosure Version: NetBSD-current: source prior to November 23, 2005 NetBSD 3.0: not affected NetBSD 2.1: affected NetBSD 2.0.3: affected NetBSD 2.0:...

[UPDATE]Microsoft Windows GRE WMF Format Multiple Unauthorized Memory Access Vulnerabilities

Microsoft Windows GRE WMF Format Multiple Unauthorized Memory Access Vulnerabilities //this bug report is update for Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities by cocoruder 2006.01.07 by cocoruder page:http://ruder.cdut.net email:frankruderathotmail.com Last...

Immunity Canvas: WMF_SETABORT

Name| wmfsetabort ---|--- CVE| CVE-2005-4560 Exploit Pack| CANVAS Description| WMF SetAbort MS06-001 Notes| CVE Name: CVE-2005-4560 VENDOR: Microsoft MSADV: MS06-001 Repeatability: Infinite MSRC: http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx CVE Url:...

Microsoft Windows Metafile handler SETABORTPROC GDI Escape vulnerability

Overview Microsoft Windows is vulnerable to remote code execution via an error in handling files using the Windows Metafile image format. Exploit code has been publicly posted and used to successfully attack fully-patched Windows XP SP2 systems. However, other versions of the Windows operating...

Simple PHP Blog: Multiple XSS Vulnerabilities

=========================================================== Simple PHP Blog: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0511-001, November 2, 2005...

TUVSA-0511-001.txt

=========================================================== Simple PHP Blog: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0511-001, November 2, 2005...

[Full-disclosure] Serendipity: Account Hijacking / CSRF Vulnerability

=========================================================== Serendipity: Account Hijacking / CSRF Vulnerability =========================================================== Technical University of Vienna Security Advisory TUVSA-0509-001, September 29, 2005...

php security update

CentOS Errata and Security Advisory CESA-2005:0705-001 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-July/074075.html https://lists.centos.org/pipermail/centos-announce/2005-July/074076.html Affected packages: php php-bcmath php-dba php-devel...

NetBSD Security Advisory 2005-001: Crypto leaks across HyperThreaded CPUs (i386, P4, HTT+SMP only)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetBSD Security Advisory 2005-001 ================================= Topic: Crypto leaks across HyperThreaded CPUs i386, P4, HTT+SMP only Version: NetBSD-current: affected, i386 on P4 with HTT and SMP kernels NetBSD 2.0: affected, i386 on P4 with HTT a...