openSUSE 10 Security Update : net-snmp (net-snmp-4759)

This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE 10 Security Update : seamonkey (seamonkey-4795)

This update fixed various security problems in Mozilla SeaMonkey. Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the sa...

MS08-001: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

The remote version of Windows contains a version of the TCP/IP protocol that does not properly parse IGMPv3, MLDv2 and ICMP structure. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29893;...

Microsoft Windows LSASS privilege escalation vulnerability

Overview The Windows LSASS service contains privilege escalation vulnerability. Description The Windows Local Security Authority Subsystem Service LSASS is a process that enforces the local security policy. Per Microsoft Security Bulletin MS08-002: An elevation of privilege vulnerability exists i...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

!/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English, DirectX 7.0 4.07.00.0700...

iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability

iDefense Security Advisory 01.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 07, 2008 I. BACKGROUND Motorola netOctopus is an asset management agent. It is used to deploy software, monitor performance, and configure client machines from a central administrative console. More...

Move Networks Quantum Streaming Player SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================ Move Networks Quantum Streaming Player SEH Overwrite Exploit ============================================================ Move Networks Quantum Streaming Player SEH Overwrite...

Debian DSA-1454-1 : freetype - integer overflow

Greg MacManus discovered an integer overflow in the font handling of libfreetype, a FreeType 2 font engine, which might lead to denial of service or possibly the execution of arbitrary code if a user is tricked into opening a malformed font. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

SuSE 10 Security Update : TeX (ZYPP Patch Number 4818)

Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935 / CVE-2007-5937. dvips additionally created temporary files in an insecure manner. CVE-2007-5936 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

openSUSE 10 Security Update : libsndfile (libsndfile-4430)

This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-4430. Th...

Move Networks Quantum Streaming Player - Remote Overflow (SEH)

Move Networks Quantum Streaming Player SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 1027 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4802)

This update of OpenOfficeorg adds restrictions to SQL statements of Java-based databases to avoid the execution of native Jave code by creating procedures. CVE-2007-4575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow !/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English...

ClamAV 0.91.2 libclamav MEW PE Buffer Overflow Exploit

No description provided by source. ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...

Move Networks Quantum Streaming Player - Remote Overflow (SEH)

Move Networks Quantum Streaming Player - Remote Overflow SEH Move Networks Quantum Streaming Player SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 1027 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.c...

MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)

The remote host is running version of Windows and LSASS that could allow a local user to gain elevated privileged. An attacker who has the ability to execute arbitrary commands on the remote host may exploit this flaw to gain SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"...

Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= Microsoft DirectX SAMI File Parsing Remote Stack Overflow Exploit ================================================================= !/usr/bin/python Bug discovered by Jun Mao...

VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0001 Synopsis: Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages Issue date: 2008-01-07...

openSUSE 10 Security Update : phpPgAdmin (phpPgAdmin-4713)

Several flaws in phpPgAdmin could be exploited by remote attackers to perform cross site scripting XSS attacks CVE-2007-2865, CVE-2007-5728. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : net-snmp (net-snmp-4753)

This update of net-snmp fixes the following bugs : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from t...