CVE-2009-4652

The CVE concerns ngIRCd (versions 13–14). When SSL/TLS is enabled and standalone mode is disabled, the functions Conn_GetCipherInfo and Conn_UsesSSL in src/ngircd/conn.c can allow remote attackers to trigger a denial of service (application crash) by sending the MOTD command from another server o...

[SECURITY] Fedora 13 Update: pdfedit-0.4.3-4.fc13

Free pdf editing using PdfEdit. Complete editing of pdf documents is made possible with PDFedit. You can change either raw pdf objects for advanced users or use predefined gui functions. Functions can be easily added as everything is based on a script...

Former Researcher Iceman Sentenced to 13 Years

A former security researcher turned criminal hacker has been sentenced to 13 years in federal prison for hacking into financial institutions and stealing credit card account numbers. Max Ray Butler, who used the hacker pseudonym Iceman, was sentenced Friday morning in U.S. District Court in...

CVE-2010-0681

creationtimestamp| type| source ---|---|--- 2010-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11437...

CVE-2010-0002

creationtimestamp| type| source ---|---|--- 2010-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33508...

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

ArticleMS v2.0 XSS Vulnerability

No description provided by source. . . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | \ /| | / // \ / / | | | Y \ || /\ | \ | \ |\ /| || / / / / / / / / / Target: ArticleMS Version: 2.0 Exploit Type: XSS Vulnerability Price: FREE Date: 12/13/09 Tested on: XP/SP3...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon 9.6....

SuSE 11.2 Security Update: libopenssl-devel (2009-11-13)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

Bitrix Site Manager Remote File Inclusion

Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just write this exploit under perl module...

XM Easy Personal FTP Server 'APPE' and 'DELE' Command Remote Denial of Service Vulnerability

Date of Discovery: 13-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Dxmsoft Affected: XM Easy Personal FTP Server 5.8.0 Earlier versions may also be affected Overview: XM Easy Personal FTP Server is an easy use FTP server Application. Denial of service vulnerability exists in XM Personal FTP...

CVE-2009-4108

creationtimestamp| type| source ---|---|--- 2009-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10104 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10221...

2WIRE Router 5.29.52 - Remote Denial of Service

""" ======================================== 2WIRE REMOTE DENIAL OF SERVICE ======================================== Device: 2wire Gateway Router/Modem Vulnerable Software: :50001/xslt?page=%0d%0a WORKAROU...

Fedora 11 : jasper-1.900.1-13.fc11 (2009-10761)

Tue Oct 13 2009 Rex Dieter - 1.900.1-13 - CVE-2008-3520 jasper: multiple integer overflows in jasalloc calls 461476 - CVE-2008-3522 jasper: possible buffer overflow in jasstreamprintf 461478 - Fri Jul 24 2009 Fedora Release Engineering - 1.900.1-12 - Rebuilt for...

Fedora 10 : jasper-1.900.1-13.fc10 (2009-10737)

Tue Oct 13 2009 Rex Dieter - 1.900.1-13 - CVE-2008-3520 jasper: multiple integer overflows in jasalloc calls 461476 - CVE-2008-3522 jasper: possible buffer overflow in jasstreamprintf 461478 - Fri Jul 24 2009 Fedora Release Engineering - 1.900.1-12 - Rebuilt for...

MS09-062: Description of the security update for Microsoft Report Viewer 2008 Service Pack 1 Redistributable Package: October 13, 2009

None None...

Patch Tuesday Heads-Up: 13 Bulletins, 8 Critical

Microsoft is planning a bumper Patch Tuesday next week — 13 bulletins covering 34 security vulnerabilities in a wide range of products. Eight of the 13 bulletins will be rated “critical,” Microsoft’s highest severity rating. According to Microsoft’s advance notice, the patches coming on October 1...

SuSE 11 Security Update : IBM Java 1.4.2 (SAT Patch Number 735)

This update brings the IBM Java 1.4.2 JDK and JRE to Service Release 13. It fixes lots of bugs and various security issues : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running t...

SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12387)

This update brings the IBM Java 1.4.2 JDK and JRE to Service Release 13. It fixes lots of bugs and various security issues : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running t...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6136)

This update brings the IBM Java 1.4.2 JDK and JRE to Service Release 13. It fixes lots of bugs and various %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if...