[SECURITY] [DSA 931-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 931-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 929-1] New petris packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 929-1 [email protected] http://www.debian.org/security/ Steve Kemp Jan 9, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------...

[SECURITY] [DSA 929-1] New petris packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 929-1 [email protected] http://www.debian.org/security/ Steve Kemp Jan 9, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------...

CVE-2005-4633

CVE-2005-4633 is a duplicate of CVE-2005-4619. The connected CVE-2005-4619 entry describes a SQL injection vulnerability in index.php of phpoutsourcing Zorum Forum (version 3.5 and earlier), exploitable via the rollid parameter in the showhtmllist method to execute arbitrary SQL commands. The 463...

CVE-2005-4633

...

CVE-2005-4635

CVE-2005-4635 affects the Linux kernel via nl_fib_input in fib_frontend.c, where lack of validation for header and payload lengths allows remote attackers to trigger a denial of service (invalid memory reference) with malformed fib_lookup netlink messages. Affected lineage is kernels before 2.6.1...

CVE-2005-4634

CVE-2005-4634 describes an SQL injection in index.php of ActiveCampaign SupportTrio 1.4, exploitable via the page parameter. The vulnerability is documented with a high impact score (CVSS v2 base 7.5) and network access with no authentication required, causing potential unauthorized database comm...

[Full-disclosure] Time modification flaw in BSD securelevels on NetBSD and Linux

Advisory: Time modification flaw in BSD securelevels on NetBSD and Linux The implementations of securelevels on NetBSD and Linux contain an integer overflow, allowing the protection of system time to be completely circumvented. Details ======= Product: NetBSD Linux Affected Versions:...

[Full-disclosure] BSD Securelevels: Circumventing protection of files flagged immutable

Advisory: BSD Securelevels: Circumventing protection of files flagged immutable By mounting an arbitrary filesystem, it is possible to mask files flagged immutable with any user-defined files. Details ======= Product: FreeBSD up to 6.0-STABLE and 7.0-CURRENT OpenBSD up to 3.8 DragonFly up to 1.2...

[Full-disclosure] [USN-239-1] libapache2-mod-auth-pgsql vulnerability

=========================================================== Ubuntu Security Notice USN-239-1 January 09, 2006 libapache2-mod-auth-pgsql vulnerability CVE-2005-3656 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty...

3Com 3CDaemon 2.0 FTP Username Overflow

This module exploits a vulnerability in the 3Com 3CDaemon FTP service. This package is being distributed from the 3Com web site and is recommended in numerous support documents. This module uses the USER command to trigger the overflow. This module requires Metasploit:...

SlimFTPd LIST Concatenation Overflow

This module exploits a stack buffer overflow in the SlimFTPd server. The flaw is triggered when a LIST command is received with an overly-long argument. This vulnerability affects all versions of SlimFTPd prior to 3.16 and was discovered by Raphael Rigo. This module requires Metasploit:...

CVE-2005-4628

Technical details about CVE-2005-4628 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected product versions, impact, and remediation information.

CVE-2005-4631

CVE-2005-4631 : SQL injection in index.php in Zina 0.12.07 and earlier via the p parameter. Root cause: unsafely handled user input enabling arbitrary SQL execution. Impact per CVSS: partial confidentiality, integrity, and availability. No exploitation details or remediation are provided in the s...

CVE-2005-4630

CVE-2005-4630 affects ClientExec 2.3. It is a SQL injection vulnerability in index.php that allows remote attackers to execute arbitrary SQL commands via the parameters (billshowid, billdetailid, fuse, frmClientID). The issue enables manipulation of backend queries and can lead to data exposure o...

APPLE-SA-2006-01-05 AirPort firmware update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2006-01-05 AirPort firmware update The following AirPort firmware updates are available: AirPort Express Firmware Update 6.3 for Mac OS X AirPort Express Firmware Update 6.3 for Windows AirPort Extreme Firmware Update 5.7 for Mac OS X AirPort...

BlueCoat WinProxy 6.0 R1c (Host) Remote Stack/SEH Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== BlueCoat WinProxy 6.0 R1c Host Remote Stack/SEH Overflow Exploit ================================================================== !perl "WinProxy 6.0 R1c" Remote Stack/SEH...

BlueCoat WinProxy <= 6.0 R1c (GET Request) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== BlueCoat WinProxy new PeerAddr = $ip, PeerPort = $port, Proto = 'tcp', Timeout = 2 or print '- Error: Could not establish a connection to the server!' and exit1; print "+...

BlueCoat WinProxy 6.0 R1c - Host Remote Stack Overflow (SEH)

BlueCoat WinProxy 6.0 R1c - Host Remote Stack Overflow SEH !perl "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit Author: FistFucker aka FistFuXXer e-Mail: [email protected] Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364 CVE info: CAN-2005-4085 use IO::Socke...

BlueCoat WinProxy 6.0 R1c - 'Host' Remote Stack Overflow (SEH)

!perl "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit Author: FistFucker aka FistFuXXer e-Mail: [email protected] Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364 CVE info: CAN-2005-4085 use IO::Socket; destination IP address $ip = '127.0.0.1'; destination TC...