cpio security update

CentOS Errata and Security Advisory CESA-2007:0245 An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A...

RHEL 4 : openssh (RHSA-2007:0257)

Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files necessary for...

RHEL 4 : unzip (RHSA-2007:0203)

Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...

Low: Red Hat Security Advisory: openssh security and bug fix update

Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files necessary for...

Low: Red Hat Security Advisory: cpio security and bug fix update

An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platform...

Low: Red Hat Security Advisory: unzip security and bug fix update

Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...

CVE-2005-4839

PureTLS CVE-2005-4839 affects versions before 0.9b5, where optional Extensions and Algorithm.Parameters values are not cleared before parsing, potentially leaking values from earlier certificates. The vulnerability is disclosed in multiple sources (NVD, CVE list) and tied to PureTLS prior to 0.9b...

The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ==================================================================== The Merchant 2005-2006 The Merchant Project Remote File Include Exploit //'===============================================================================================...

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

2005-2006 The Merchant Project Remote File Include Exploit //'=============================================================================================== //'Script Name: 2005-2006 The Merchant Project //'Coded by : kezzap66345 //'Author : kezzap66345 //'Contact : [email protected]...

CVE-2007-2320

SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...

CVE-2005-4838

CVE-2005-4838 corresponds to cross-site scripting vulnerabilities in Apache Tomcat 5.5.6 and earlier, manifested in the JSP2 example pages (el/functions.jsp, el/implicit-objects.jsp, jspx/textRotate.jspx under examples/jsp2/), exploitable via a crafted request to snp/snoop.jsp. The issue is trigg...

CVE-2007-2005

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 contacttype.php, 2 itemstatustype.php, 3 projectstatustype.php, 4 requesttype.php, 5...

CVE-2007-2005

CVE-2007-2005 describes multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo/Joomla!, allowing an attacker to execute arbitrary PHP code. The flaw is triggered via a user-provided URL in the mosConfig_absolute_path parameter passed to files in inc/: contact...

HP-UX ICMP vulnerable to DoS via ICMP Path Maximum Transmission Unit (PMTU) Discovery

Overview A vulnerability in HP-UX may allow a remote attacker to cause a denial of service by sending a specially crafted ICMP packet. Description A number of widely accepted Internet standards describe different aspects of the relationships between the Internet Control Message Protocol ICMP and...

Cross site scripting

Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting XSS...

CVE-2007-1938

CVE-2007-1938 affects Justsystem Ichitaro (2005–2007 and related products). The vulnerability is triggered by a document delivered via e-mail or a web site, with an underlying cause described as a buffer overflow or cross-site scripting (XSS). The impact is not clearly specified in the provided d...

CVE-2005-4837

Net-SNMP vulnerability CVE-2005-4837 affects snmpd in master agentX mode across 5.2.x (before 5.2.2), 5.1.x (before 5.1.3), and 5.0.x (before 5.0.10.2). Exploitation could cause remote denial of service (crash) by triggering a specific TCP disconnect, freeing an incorrect variable. This is a dist...

Remot File Include In Script Lore v1

By Hasadya Raed Contact : [email protected] Greetz : Brotha Mohammed Zeed --------------------------- Script : Lore v1 Download : http://www.pineappletechnologies.com Dork : Pineapple Technologies 2003-2005 c --------------------------- B.Files : class.phpmailer.php function.htmlcheckboxes.php...

Sql injection

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

Stack overflow

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...