SQL-Ledger验证绕过漏洞

SQL-Ledger是一款开源的ERP系统。 SQL-Ledger验证机制实现存在错误，远程攻击者可以利用漏洞未授权访问应用程序。 SQL-Ledger使用的会话验证存在问题，当用户登录时，会检查密码信息，如果匹配users/members文件中的内容，那么就生成会话ID并在WEB浏览器上处理。验证所需只要简单在COOKIE中指定"sql-ledger-username"名和timestamp值，并且这个值匹配通过GET或POST操作传递的"sessionid"值。username是登录的用户名，timestamp是UNIX时间戳。 SQL-Ledger = 2.6.17...

ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability

ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-049.html December 13, 2006 -- CVE ID: CVE-2006-6222 -- Affected Vendor: Symantec -- Affected Products: Veritas NetBackup 6.0 MP4 Veritas NetBackup 5.1 MP6 Veritas...

[SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1236-1 [email protected] http://www.debian.org/security/ Steve Kemp December 13, 2006 -...

Debian DSA-1234-1 : ruby1.6 - denial of service

A denial of service vulnerability has been discovered in the CGI library included with Ruby, the interpreted scripting language for quick and easy object-oriented programming. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Debian DSA-1235-1 : ruby1.8 - denial of service

A denial of service vulnerability has been discovered in the CGI library included with Ruby, the interpreted scripting language for quick and easy object-oriented programming. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CVE-2006-6496

CA vulnerability CVE-2006-6496 affects CA Anti-Virus 2007 v8.1, CA Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0, due to improper handling of NULL buffers in VetMONNT.sys and VetFDDNT.sys that allows a local administrator to crash the system via certain IOCTLs. The issue...

[SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks

------------------------------------------------------------------------ Debian Security Advisory DSA-1236-1 [email protected] http://www.debian.org/security/ Steve Kemp December 13, 2006 - ------------------------------------------------------------------------ Package : enemies-of-carlotta...

[SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1235-1 [email protected] http://www.debian.org/security/ Steve Kemp December 13, 2006 - ------------------------------------------------------------------------ Package : ruby1.8 Vulnerability...

[SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1234-1 [email protected] http://www.debian.org/security/ Steve Kemp December 13, 2006 - ------------------------------------------------------------------------ Package : ruby1.6 1.6.8-12sarge3...

CVE-2006-6495

Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function. NOTE: this issue normally does not cross privilege boundaries, except in...

CVE-2006-6494

CVE-2006-6494 affects Sun Solaris 8, 9, and 10 where ld.so.1 is vulnerable to a directory traversal via a dot-dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers. According to the provided records, this allows a local ...

CVE-2006-6495

Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function. NOTE: this issue normally does not cross privilege boundaries, except in...

CVE-2006-4702

CVE-2006-4702 is a remote code execution vulnerability in the Windows Media Format Runtime used by Windows Media Player 6.4 and Windows XP SP2, Server 2003 and SP1. The root cause is an unchecked buffer overrun while processing ASF files, allowing a crafted ASF file to execute arbitrary code with...

CVE-2006-2386

CVE-2006-2386 is an unspecified remote code execution vulnerability affecting Microsoft Outlook Express 6 and earlier, exploitable via a crafted Windows Address Book (.wab) file. Technical details in connected docs indicate the root cause is a buffer/validation issue in Windows Address Book (WAB)...

CVE-2006-5584

CVE-2006-5584 affects Microsoft Windows 2000 SP4 with the Remote Installation Service (RIS) TFTP server, which is by default allowed to accept anonymous writes. The vulnerability arises from anonymous access to the RIS TFTP file structure, enabling remote attackers to upload and overwrite operati...

CVE-2006-6495

CVE-2006-6495 describes a stack-based buffer overflow in ld.so.1 on Sun Solaris 8/9/10. An attacker can trigger arbitrary code execution via large precision padding values in a format string specifier passed to the doprf function, resulting in local code execution. The issue generally does not cr...

CVE-2006-5584

The Remote Installation Service RIS in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS...

Microsoft Windows Media Format ASF Parsing Buffer Overflow (MS06-078; CVE-2006-4702)

Advanced Streaming Format ASF is a proprietary streaming format developed by Microsoft that defines the structure of complex, synchronized object data streams and provides streaming media services for the Windows Media framework. It is used for multimedia data including audio, video, still images...

Microsoft Windows SNMP Memory Corruption Vulnerability

Overview A vulnerability in the way Microsoft Windows handles SNMP may allow a buffer overflow that may allow remote execution of arbitrary code. Description Microsoft Windows contains a buffer overflow that may occur when handling malformed SNMP packets. According to Microsoft Security Bulletin...

ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability

ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-047.html December 12, 2006 -- CVE ID: CVE-2006-4704 -- Affected Vendor: Microsoft -- Affected Products: Visual Studio 2005 Standard Edition Visual Studio 20...