Unfixed XSS vulnerability at www.iltuosito.it

Security researcher Scr34M, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.iltuosito.it, which at the time of submission ranked 1016780 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

CVE-2007-6206

CVE-2007-6206 affects the Linux kernel (2.4.x and 2.6.x up to 2.6.24-rc3). The issue lies in the do_coredump function in fs/exec.c, where the core dump file’s UID is not changed if a core dump already exists in the same location when a root-owned process dumps a core. This behavior could allow a ...

Moderate: htdig security update

3:3.2.0b6-4 - CVE-2007-6110...

Solaris 10 (x86) : 127740-03

SunOS 5.10x86: rpcmod patch. Date this patch was last updated by Sun : Dec/18/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (x86) : 128492-01

SunOS 5.10x86: devfs patch. Date this patch was last updated by Sun : Nov/28/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Fedora Core 6 : perl-5.8.8-12 (2007-748)

This update resolves CVE-2007-5116, fixing a security issue with perl's regex parser. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : wesnoth-1.2.8-2.fc7 (2007-3986)

Update to 1.2.8. Fixes 405661 CVE-2007-5742 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2007-6208

The CVE-2007-6208 issue affects Claws Mail (claws-mail-tools) via the sylprint.pl temporary-file creation in the Sylprint component. A local attacker can exploit a symlink vulnerability to overwrite arbitrary files with the privileges of the user running Claws Mail. The root cause is insecure han...

Mortbay Jetty vulnerable to HTTP response splitting

Overview Mortbay Jetty is vulnerable to HTTP response splitting, which may allow a remote, unauthenticated attacker to inject various HTTP headers Description Mortbay Jetty is a web server that is written in Java. Jetty fails to properly handle HTTP headers with CRLF sequences, which can allow an...

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

Apple Mac OSX 10.5.0 Leopard - vpnd Remote Denial of Service PoC / vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...

Unfixed XSS vulnerability at www.freestreet.it

Security researcher Scr34M, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.freestreet.it, which at the time of submission ranked 236866 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

Apple Mac OSX xnu 1228.0 - mach-o Local Kernel Denial of Service (PoC)

Apple Mac OSX xnu 1228.0 - mach-o Local Kernel Denial of Service PoC / xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand...

CVE-2007-6207

CVE-2007-6207 affects Xen 3.x on IA-64 where mov_to_rr RID is not validated, allowing a VTi domain to read memory from other domains. The vulnerability enables partial confidentiality loss. Remediation, as evidenced by RHSA/CESA advisories and OpenV/OSS listings, is to apply the kernel updates th...

IBM AIX bellmail 有邮件用户代理本地栈溢出漏洞

BUGTRAQ ID: 26257 CVECAN ID: CVE-2007-4623 IBM AIX是一款商业性质的UNIX操作系统。 AIX的bellmail工具实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 AIX中所安装的bellmail程序中的sendrmt函数存在栈溢出漏洞，当用户试图使用“m”命令发送邮件时会调用该函数。在这个函数中，调用了一些sprintf以将用户提供的输入连接到静态字符串，但没有执行边界检查来确保所生成的字符串会适合栈上所分配的目标缓冲区，因此攻击者可以提供超长参数控制栈上数据和受影响进程，导致以root权限执行任意指令。 IBM AIX 5...

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

/ vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception. 0x00004828 in acceptconnections - Private Source Code -DO NOT DISTRIBUT...

HP-UX PHNE_36185 : HP-UX Running BIND 8, Remote DNS Cache Poisoning (HPSBUX02289 SSRT071461 rev.1)

s700800 11.11 Bind 8.1.2 Patch : A potential vulnerability has been identified with HP-UX running BIND 8. The vulnerability could be exploited remotely to cause DNS cache poisoning. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...

Slackware 11.0 / 12.0 / current : cairo (SSA:2007-337-01)

New cairo packages are available for Slackware 11.0, 12.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-337-01. The text itself is copyright C...

CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting XSS style attacks using web client components that can send arbitrary...

CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x are affected by CVE-2007-6203, where the HTTP Method header is not sanitized when reflected in a 413 Response, enabling cross-site scripting-like attacks via headers sent by the client. The root cause is lack of sanitization of the Method specifier header in suc...

AIX 5.2 TL 10 : bos.rte.cron (U812104)

The remote host is missing AIX PTF U812104, which is related to the security of the package bos.rte.cron. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812104. The text itself is copyright C...