SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities

SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell...

[security bulletin] HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01293337 Version: 1 HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...

[SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1419-1 [email protected] http://www.debian.org/security/ Martin Schulze December 5th, 2007 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: openoffice.org2 security update

Updated openoffice.org2 packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite. HSQLDB is the default database engine...

Code injection

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6241

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6241

Beehive Forum 0.7.1 and earlier are affected by a SQL injection vulnerability in the post.php script, exploitable via the t_dedupe parameter to execute arbitrary SQL commands remotely. This is caused by insufficient input filtering in t_dedupe, allowing an attacker to manipulate SQL sent to the d...

CVE-2007-6014

Beehive Forum 0.7.1 and earlier are affected by a SQL injection in post.php via the t_dedupe parameter. The vulnerability allows remote SQL commands to be executed and impacts Beehive Forum’s data. A patch/update has been released by the vendor (Beehive Forum 0.8), and the referenced recovery gui...

CVE-2007-6240

CVE-2007-6240 concerns a SQL injection in Snitz Forums 2000 (build 3.4.06) via the BuildTime parameter in active.asp, allowing remote attackers to execute arbitrary SQL commands. Affected software: Snitz Forums 2000 3.4.06. Root cause: unparameterized SQL handling in the active.asp path. Impact: ...

CVE-2007-5614

CVE-2007-5614 affects Mortbay Jetty prior to 6.1.6rc1, where improper handling of certain quote sequences in HTML cookie parameters can lead to remote session hijacking via unspecified vectors. This is documented in the original vulnerability description plus multiple vulnerability references (in...

CVE-2007-5613

CVE-2007-5613 is an XSS vulnerability in Mortbay Jetty’s Dump Servlet prior to 6.1.6rc1. An attacker can inject arbitrary script/HTML via unspecified parameters and cookies, enabling potential client-side script execution in affected web applications. Impact is described in the connected advisori...

CVE-2007-5615

Jetty (Mortbay Jetty) is affected by CVE-2007-5615: a CRLF injection vulnerability in Jetty before 6.1.6rc0 that could let remote attackers inject arbitrary HTTP headers and perform HTTP response splitting. IBM/OpenVAS/ Fedora references corroborate the vulnerability in Jetty and list related CVE...

CVE-2007-5613

Cross-site scripting XSS vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies...

CVE-2007-5355

The Web Proxy Auto-Discovery WPAD feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured, resolves an unqualified wpad hostname in a second-level domain outside this configured DNS domain, which allows remote WPAD servers to conduct...

CVE-2007-5355

The CVE describes a design/logic issue in Microsoft WPAD for Internet Explorer 6/7 where, if a primary DNS suffix has three or more components, unqualified wpad queries can resolve to a host in a deeper second-level domain outside the configured DNS zone, enabling potential MITM by remote WPAD se...

CVE-2007-5972

Double free vulnerability in the krb5defstoremkey function in lib/kdb/kdbdefault.c in MIT Kerberos 5 krb5 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store...

Apple Mac OS X 10.5.0 (leopard) vpnd Remote Denial of Service PoC

No description provided by source. / vpnd-leopard-lb-dos.c Copyright c 2007 by [email protected] Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception...

SYMSA-2007-014: SQL Injection Vulnerability in Beehive Forum Software

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-014 Advisory Title: SQL Injection Vulnerability in Beehive Forum Software Author: Nick Bennett Robert Brown / [email protected] Release...

SA-2007-031 - Drupal core - SQL Injection possible when certain contributed modules are enabled

The function taxonomyselectnodes directly injects variables into SQL queries instead of using placeholders. While taxonomy module itself validates the input passed to taxonomyselectnodes, this is a weakness in Drupal core. Several contributed modules, such as taxonomymenu, ajaxLoader, and ubrowse...

Apple Mac OS X xnu <= 1228.0 Local Kernel Denial of Service PoC

No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386...