HP-UX swagentd远程溢出漏洞

BUGTRAQ ID: 26855 CVECAN ID: CVE-2007-6195 HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX操作系统的swagentd中所定义的swrpcagentinit函数（opcode 0x04）中存在缓冲区溢出漏洞，如果远程攻击者向该函数传送了畸形参数的话，就可以触发这个溢出，导致覆盖指针，因此可能会出现拒绝服务或执行任意指令。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP已经为此发布了一个安全公告（HPSBUX02294）以及相应补丁: HPSBUX02294：SSRT071451 rev.1 - HP-UX...

CVE-2007-6469

CVE-2007-6469 affects phpRPG 0.8 with an SQL injection in index.php triggered via the username parameter when magic_quotes_gpc is disabled. Remote attackers could potentially execute arbitrary SQL commands. The public records supplied do not include exploitation details or a confirmed remediation...

CVE-2007-6463

CVE-2007-6463 affects PHP Real Estate Classifieds: multiple XSS flaws in the admin panel allow remote injection of arbitrary script via unspecified text areas/boxes. Base score 4.3 (MEDIUM); impact limited to partial integrity compromise and non-sensitive disclosure, with no authentication requir...

applesmb-overflow.txt

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

Unfixed XSS vulnerability at www.yetanotherreviewsite.co.uk

Security researcher Persian Fox, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.yetanotherreviewsite.co.uk, which at the time of submission ranked 924639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Important: autofs security update

5.0.1-0.rc2.55.el5.2 - Bug 426219: CVE-2007-6285 autofs default doesn't set nodev in /net rhel-5.1.z - use mount option nodev for -hosts map unless dev is explicily specified. - Related: rhbz426219...

KLA10191 Vulnerability in HP Software Update

An unspecified vulnerability was found in an HP Software Update. By exploiting this vulnerability malicious users can read and overwrite arbitrary files. This vulnerability can be exploited remotely at a point related to the Rules Engine. Original advisories - Exploitation Public exploits exist f...

Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit

No description provided by source. / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...

Important: autofs5 security update

5.0.1-0.rc2.55.el46.2 - Bugzilla Bug 426221: CVE-2007-6285 autofs default doesn't set nodev in /net rhel-4.6.z - use mount option nodev for -hosts map unless dev is explicily specified. - Related: rhbz426221...

Unfixed XSS vulnerability at www.caenlamer.fr

Security researcher TreX, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.caenlamer.fr, which at the time of submission ranked 625309 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currently...

CVE-2007-6453

RaidenHTTPD 2.0.19 contains a directory traversal vulnerability in raidenhttpd-admin/workspace.php (WebAdmin must be enabled) that allows remote unauthenticated attackers to include and execute arbitrary local files via a .. in the ulang parameter. Multiple sources (NVD/NVDCVE, vendor/JVN entries...

CVE-2007-6466

CVE-2007-6466 affects FreeWebshop 2.2.1 (and MOG-WebShop based on the same code) with multiple SQL injection vulnerabilities in index.php. The exploitable vectors are: (1) prod parameter in a details action, (2) cat parameter in a browse list action, and (3) group parameter in a categories action...

CVE-2007-5966

Integer overflow in the hrtimerstart function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service panic via a large relative timeout value. NOTE: some of these details are obtained from third party information...

CVE-2007-6464

CVE-2007-6464 affects Form Tools 1.5.0b, where PHP remote file inclusion is exploitable via the g_root_dir parameter in global/templates/admin_page_open.php and global/templates/client_page_open.php. The root cause is insufficient validation of a user-supplied URL, enabling execution of arbitrary...

CVE-2007-6468

CVE-2007-6468 is a buffer overflow in the HuffDecode function(s) located in hw_utils/hwrcon/huffman.c and hexenworld/Client/huffman.c for Hammer of Thyrion 1.4.2. A crafted Huffman-encoded packet can trigger memory corruption, enabling remote code execution or a denial of service. The available s...

CVE-2007-6465

The CVE-2007-6465 entry is verified by multiple sources describing XSS vulnerabilities in ganglia-web prior to 3.0.6. Applicable components are web/host_gmetrics.php, web/graph.php, and web/get_context.php, with vulnerable parameters including (c, h) and (G, me, x, n, v, l, vl, st, and others) as...

CVE-2007-6281

St. Bernard Open File Manager 9.5 is affected by a heap-based buffer overflow in the ofmnt.exe Open File Manager service. The flaw allows remote code execution by sending an oversized request; authentication is not required. Affected product/version: St. Bernard Open File Manager 9.5. Root cause:...

CVE-2007-6456

Technical details are not publicly provided in the supplied documents. No concrete product/version/impact details are present. Monitor for updates from official sources.

CVE-2007-6469

SQL injection vulnerability in index.php in phpRPG 0.8, when magicqutoesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6458

CVE-2007-6458 describes an SQL injection in 123tkShop 0.9.1. The vulnerability is in shop/mainfile.php, enabling remote attackers to inject SQL through a base64-encoded value of the admin parameter sent to shop/admin.php. This stems from improper handling of the admin parameter, allowing arbitrar...