Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

/ vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception. 0x00004828 in acceptconnections - Private Source Code -DO NOT DISTRIBUT...

Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)

/ xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand unsigned long cmd; / LCTHREAD or LCUNIXTHREAD / unsigned long cmdsize;...

CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x are affected by CVE-2007-6203, where the HTTP Method header is not sanitized when reflected in a 413 Response, enabling cross-site scripting-like attacks via headers sent by the client. The root cause is lack of sanitization of the Method specifier header in suc...

CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting XSS style attacks using web client components that can send arbitrary...

AIX 5.2 TL 10 : bos.rte.printers (U809751)

The remote host is missing AIX PTF U809751, which is related to the security of the package bos.rte.printers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U809751. The text itself is copyright C...

Fixed XSS vulnerability at www.eplus-unternehmen.de

Security researcher Hanno Boeck, has submitted on 12/03/2007 a cross-site-scripting XSS vulnerability affecting www.eplus-unternehmen.de, which at the time of submission ranked 314818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. ...

AIX 5.3 TL 6 : bos.net.tcp.client (U812719)

The remote host is missing AIX PTF U812719, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812719. The text itself is copyright C...

AIX 5.2 TL 10 : bos.net.tcp.client (U812065)

The remote host is missing AIX PTF U812065, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812065. The text itself is copyright C...

AIX 5.3 TL 5 / 5.3 TL 6 : sysmgt.websm.rte (U810485)

The remote host is missing AIX PTF U810485, which is related to the security of the package sysmgt.websm.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U810485. The text itself is copyright C...

AIX 5.2 TL 10 : bos.rte.cron (U812104)

The remote host is missing AIX PTF U812104, which is related to the security of the package bos.rte.cron. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812104. The text itself is copyright C...

AIX 5.2 TL 10 : printers.rte (U814071)

The remote host is missing AIX PTF U814071, which is related to the security of the package printers.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U814071. The text itself is copyright C...

AIX 530005 : U810473

The remote host is missing AIX PTF U810473 which is related to the security of the package bos.mp64 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

[slackware-security] rsync

New rsync packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found here: https://vulners.com/cve/CVE-2007-4091 http://lists.samba.org/archive/rsync-announce/2007/000050.html Here are the detai...

Unfixed XSS vulnerability at capricorn.anf.unf.edu

Security researcher Codes, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting capricorn.anf.unf.edu, which at the time of submission ranked 98113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Unfixed XSS vulnerability at www.mcgeorge.edu

Security researcher Codes, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.mcgeorge.edu, which at the time of submission ranked 647380 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is currentl...

Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000)

Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...

CVE-2007-6201

The vulnerability CVE-2007-6201 affects Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12, where a flaw in a “faulty add-on” and related to the turn_cmd option allows a denial of service (hang) and potentially execution of other commands via unknown vectors. The connected documents confirm affec...

CVE-2007-5742

CVE-2007-5742 is a directory-traversal vulnerability in the Wesnoth WML engine preprocessor affecting Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12. The issue allows remote attackers to read arbitrary files via directory traversal sequences (".."), as described in the initial advisory. The v...

CVE-2007-6202

CVE-2007-6202 exposes a SQL injection in Neocrome Seditio CMS (plugins/search/search.php, via plug.php) on version 121 and earlier. The vulnerability arises from unsanitized input to the pag_sub parameter used in database queries when magic_quotes_gpc is disabled, allowing remote attackers to man...

CVE-2007-5502

CVE-2007-5502 affects the OpenSSL FIPS Object Module 1.1.1. The PRNG does not auto-seed during the FIPS self-test, causing generated data to be more predictable and potentially enabling attackers to bypass protections relying on randomness. This vulnerability is documented across multiple sources...