Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

Microsoft Step-by-Step Interactive Training bookmark buffer overflow

Added: 05/04/2007 CVE: CVE-2006-3448 BID: 22484 OSVDB: 31883 Background Microsoft Step-by-Step Interactive Training is the engine used by various training programs. Problem A buffer overflow vulnerability in Microsoft Step-by-Step Interactive Training allows command execution when a specially...

ZOO - .ZOO Decompression Infinite Loop Denial of Service (PoC)

ZOO - .ZOO Decompression Infinite Loop Denial of Service PoC / Exploit for the vulnerability: Multiple vendors ZOO file decompression infinite loop DoS coded by Jean-Sébastien Guay-Leroux September 2006 / include include include // Structure of a ZOO header define ZOOHEADERSIZE 0x0000002a define...

ZOO - '.ZOO' Decompression Infinite Loop Denial of Service (PoC)

/ Exploit for the vulnerability: Multiple vendors ZOO file decompression infinite loop DoS coded by Jean-Sébastien Guay-Leroux September 2006 / include include include // Structure of a ZOO header define ZOOHEADERSIZE 0x0000002a define ZHTEXT 0 define ZHTAG 20 define ZHSTARTOFFSET 24 define...

Stack overflow

Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287...

shadow security update

CentOS Errata and Security Advisory CESA-2007:0276 Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs f...

cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update

CentOS Errata and Security Advisory CESA-2007:0220 Updated gcc packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C...

RHEL 4 : gdm (RHSA-2007:0286)

An updated gdm package that fixes a security issue and a bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm, the X Display Manager. Gdm allows you to l...

RHEL 4 : shadow-utils (RHSA-2007:0276)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2007:0276 advisory. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow password format, as well as programs for...

RHEL 4 : gcc (RHSA-2007:0220)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0220 advisory. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support libraries. Jrgen Weigert discovered a...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

Low: Red Hat Security Advisory: sendmail security and bug fix update

Updated sendmail packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Sendmail is a very widely used Mail Transport Agent MTA. MTAs deliver mail from on...

CVE-2006-7201

CVE-2006-7201 affects EMC RSA Security SiteKey where the secure qualifier is not set on the SiteKey Flash token (PassMark Flash). This misconfiguration could allow remote attackers to obtain the token over HTTP, enabling exposure of authentication-related data. The Connected documents describe th...

CVE-2006-7199

CVE-2006-7199 describes a MITM-based exposure in EMC RSA Secur ity SiteKey where a malicious, attacker-controlled proxy can relay authentication data to and from a legitimate SiteKey server, allowing an attacker to cause the correct image to be displayed remotely. The description notes the vendor...

CVE-2006-7200

EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a cancellation interface for end users, which makes it easier for attackers to bypass one stage of authentication by stealing and replaying a token...

CVE-2006-4520

CVE-2006-4520 affects Novell eDirectory’s NCP handling. Vulnerable products include eDirectory versions 8.7.3 SP9 and 8.8.x prior to 8.8.1 FTF2; the issue lies in processing NCP fragments with a negative length. Remote, unauthenticated attackers can trigger a denial of service by causing the heap...

CVE-2006-7198

IBM WebSphere Application Server (WAS) versions affected: WAS before 5.1.1.14 and WAS for z/OS 601 before 6.0.2.13, tied to CVE-2006-7198. The connected documents describe an unspecified vulnerability with unknown impact and attack vectors, associated with a "Potential security exposure" PK26123....

The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ==================================================================== The Merchant 2005-2006 The Merchant Project Remote File Include Exploit //'===============================================================================================...

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

2005-2006 The Merchant Project Remote File Include Exploit //'=============================================================================================== //'Script Name: 2005-2006 The Merchant Project //'Coded by : kezzap66345 //'Author : kezzap66345 //'Contact : [email protected]...

Sql injection

SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-6083...