RHEL 2.1 / 3 / 4 / 5 : e2fsprogs (RHSA-2008:0003)

Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a number of utilities for creating, checking, modifying,...

openSUSE 10 Security Update : net-snmp (net-snmp-4753)

This update of net-snmp fixes the following bugs : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from t...

CVE-2007-6388

Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow !/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English...

Novell ZENworks ESM客户端STEngine.exe本地权限提升漏洞

BUGTRAQ ID: 27146 CVECAN ID: CVE-2007-5665 Novell ZENworks Endpoint Security Management（ESM）的安全客户端允许集中管理防火墙保护策略。 ESM在处理命令的执行时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 当在工作站上安装ZENworks ESM的安全客户端时，就会将STEngine服务设置为在本地SYSTEM帐号下运行。以下可执行程序中实现这个服务： 文件名：STEngine.exe（1,847,296字节） 版本：3.5.0.20...

CVE-2007-6668: Undefined Security Weakness

admin/uploadgames.php in MySpace Content Zone MCZ 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading 1 a .php file and 2 a .php%00.jpeg file...

MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)

The remote host is running version of Windows and LSASS that could allow a local user to gain elevated privileged. An attacker who has the ability to execute arbitrary commands on the remote host may exploit this flaw to gain SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"...

Move Networks Quantum Streaming Player SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================ Move Networks Quantum Streaming Player SEH Overwrite Exploit ============================================================ Move Networks Quantum Streaming Player SEH Overwrite...

Move Networks Quantum Streaming Player - Remote Overflow (SEH)

Move Networks Quantum Streaming Player - Remote Overflow SEH Move Networks Quantum Streaming Player SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 1027 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.c...

openSUSE 10 Security Update : net-snmp (net-snmp-4759)

This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0001 Synopsis: Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages Issue date: 2008-01-07...

openSUSE 10 Security Update : phpPgAdmin (phpPgAdmin-4713)

Several flaws in phpPgAdmin could be exploited by remote attackers to perform cross site scripting XSS attacks CVE-2007-2865, CVE-2007-5728. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian DSA-1453-1 : tomcat5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...

openSUSE 10 Security Update : xen (xen-4764)

This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. CVE-2007-5907: Xen 3.1.1 does not prevent modification of the CR4 T...

openSUSE 10 Security Update : seamonkey (seamonkey-4795)

This update fixed various security problems in Mozilla SeaMonkey. Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the sa...

Debian DSA-1454-1 : freetype - integer overflow

Greg MacManus discovered an integer overflow in the font handling of libfreetype, a FreeType 2 font engine, which might lead to denial of service or possibly the execution of arbitrary code if a user is tricked into opening a malformed font. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

SuSE 10 Security Update : TeX (ZYPP Patch Number 4818)

Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935 / CVE-2007-5937. dvips additionally created temporary files in an insecure manner. CVE-2007-5936 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

MS08-001: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

The remote version of Windows contains a version of the TCP/IP protocol that does not properly parse IGMPv3, MLDv2 and ICMP structure. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29893;...

openSUSE 10 Security Update : kernel (kernel-4752)

This kernel update fixes the following security problems : ++ CVE-2007-3104: The sysfsreaddir function in the Linux kernel 2.6 allows local users to cause a denial of service kernel OOPS by dereferencing a NULL pointer to an inode in a dentry. ++ CVE-2007-4997: A 2 byte buffer underflow in the...

openSUSE 10 Security Update : libsndfile (libsndfile-4430)

This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-4430. Th...