8091 matches found
RHEL 4 : gd (RHSA-2006:0194)
Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG. Several buffe...
Moderate: Red Hat Security Advisory: gd security update
Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG. Several buffe...
Cross site scripting
Cross-site scripting XSS vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...
CVE-2004-0592
Summary: CVE-2004-0592 affects the SUSE Linux 2.6.5 kernel with USAGI patches, specifically the netfilter IPv6 path. The issue arises in the tcp_find_option function when using iptables and TCP options rules, where a large option length can yield a negative integer after casting to char, causing ...
DistCC Daemon Command Execution
This module uses a documented security weakness to execute arbitrary commands on any system running distccd. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DistCC Daemon Command Execution',...
RHEL 3 : kernel (RHSA-2006:0140)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
MS04-045 Microsoft WINS Service Memory Overwrite
This module exploits an arbitrary memory write flaw in the WINS service. This exploit has been tested against Windows 2000 only. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS04-045 Microso...
Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:214)
A heap overflow vulnerability in the GTK+ gdk-pixbuf XPM image rendering library could allow for arbitrary code execution. This allows an attacker to provide a carefully crafted XPM image which could possibly allow for arbitrary code execution in the context of the user viewing the image...
Ubuntu 4.10 : php4 vulnerabilities (USN-99-1)
Stefano Di Paola discovered integer overflows in PHP's pack and unpack functions. A malicious PHP script could exploit these to break out of safe mode and execute arbitrary code with the privileges of the PHP interpreter. CAN-2004-1018 Note: The second part of CAN-2004-1018 buffer overflow in the...
Ubuntu 4.10 / 5.04 : apache2, libapache-mod-ssl vulnerabilities (USN-177-1)
Apache did not honour the 'SSLVerifyClient require' directive within a block if the surrounding block contained a directive 'SSLVerifyClient optional'. This allowed clients to bypass client certificate validation on servers with the above configuration. CAN-2005-2700 Filip Sneppe discovered a...
Ubuntu 4.10 : mysql-dfsg vulnerability (USN-109-1)
USN-32-1 fixed a database privilege escalation vulnerability; original advisory text : 'If a user was granted privileges to a database with a name containing an underscore '', the user also gained the ability to grant privileges to other databases with similar names. CAN-2004-0957' Recently a...
Ubuntu 4.10 : php4 vulnerabilities (USN-99-2)
USN-99-1 fixed a safe mode bypass which allowed malicious PHP scripts to circumvent path restrictions by creating a specially crafted directory whose length exceeded the capacity of the realpath function CAN-2004-1064. However, this caused severe regressions, some applications like SquirrelMail a...
Authentication flaw
Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780...
CVE-2004-0780
CVE-2004-0780: Buffer overflow in uustat on Sun Solaris 8/9 allows local code execution via a long -S argument. Affected: uustat component; root cause: overflow in argument handling. Impact: local privilege escalation with complete confidentiality, integrity, and availability implications. Remedi...
CVE-2004-2653
The CVE describes an unspecified privilege-escalation vulnerability in PD9 Software MegaBBS 2.0 and 2.1. Affected component: MegaBBS web admin interfaces under admin/userlevelmembers-edit.asp and admin/edit-groups.asp. Root cause and exact exploit details are not provided in the documents, only t...
CVE-2005-4702
SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition,...
muts_mailenable_imap_examine.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
[Full-disclosure] Juniper NSM remote Denial Of Service
Juniper NSM remote Denial Of Service "NetScreen-Security Manager is a software that enables you to integrate and centralize management of your Juniper Networks NetScreen security environment." More information can be found on http://www.juniper.net/customers/support/products/nsm.jsp Description:...
Unreal Tournament 2004 "secure" Overflow (Linux)
This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...