18185 matches found
[SECURITY] [DSA 1566-1] New cpio packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1566-1 [email protected] http://www.debian.org/security/ Steve Kemp May 02, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit
Exploit for unknown platform in category remote exploits ========================================================= Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit ========================================================= MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care...
[SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1565-1 [email protected] http://www.debian.org/security/ dann frazier May 1, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
CVE-2007-6339
The CVE-2007-6339 entry is about the Akamai Download Manager ActiveX control (DownloadManagerV2.ocx) before version 2.2.3.5. The vulnerability allows a remote attacker to force the download and execution of arbitrary code via undocumented object parameters in the ActiveX control. Impact is arbitr...
[SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 01, 2008 http://www.debian.org/security/faq -...
Fedora 8 : dbmail-2.2.9-1.fc8 (2008-3333)
Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 443019. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Fedora 7 : perl-5.8.8-29.fc7 (2008-3399)
Tue Apr 29 2008 Marcela Maslanova - 4:5.8.8-29 - CVE-2008-1927 buffer overflow, when unicode character is used. - Thu Jan 31 2008 Tom 'spot' Callaway - 4:5.8.8-28 - create /usr/lib/perl5/vendorperl/5.8.8/auto and own it in base perl resolves bugzilla 214580 - Mon Nov 26 2007 Tom 'spot' Callaway -...
openSUSE 10 Security Update : nagios (nagios-5168)
This update fixes several cross site scripting XSS issues in nagios CVE-2007-5624, CVE-2007-5803, CVE-2008-1360. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-5168. The text descripti...
[security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01438409 Version: 1 HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges NOTICE: The information in this Security Bulletin shou...
SuSE 10 Security Update : nagios (ZYPP Patch Number 5165)
This update fixes several cross-site scripting XSS issues in nagios. CVE-2007-5624 / CVE-2007-5803 / CVE-2008-1360 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Akamai Download Manager ActiveX Control < 2.2.3.5 Remote Code Execution
The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly allows downloading and automatic execution of arbitrary code. If an attacker can trick a user on the affected ho...
Fedora 7 : dbmail-2.2.9-1.fc7 (2008-3371)
Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 443019. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Design/Logic Flaw
Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...
Input validation
Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table SSDT functions, which allows local users to cause a denial of service system crash via 1 a crafted OBJECTATTRIBUTES structure in a call to the NtDeleteFile function, which leads ...
Debian: Security Advisory (DSA-1534-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability
ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...
VLC 0.8.6d httpd_FileCallBack Remote Format String Exploit
No description provided by source. / Epibite // bite since 1442 pown meme ta mamie / / Advisory from Luigi Auriemma CVE-2007-6682 / format string in VideoLAN VLC 0.8.6d Description : Format string vulnerability in the httpdFileCallBack...
Remote code execution
BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...
Design/Logic Flaw
The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...
CVE-2008-2003
BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...