18432 matches found
[SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1387 [email protected] http://www.debian.org/security/ Florian Weimer October 15th, 2007 http://www.debian.org/security/faq -...
CVE-2007-5461
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...
CVE-2007-5461
CVE-2007-5461 is an absolute path traversal vulnerability in the Apache Tomcat WebDAV servlet. Affected versions span Tomcat 4.x, 5.x (including 5.0.x, 5.5.x up to 5.5.25) and 6.0.x (up to 6.0.14) under certain configurations, enabling remote authenticated users to read arbitrary files via a WebD...
[SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-2 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...
libvorbis security update
CentOS Errata and Security Advisory CESA-2007:0912-01 Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contai...
eXtremail 2.1.1 - Remote Heap Overflow (PoC)
!/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n"; sendSOCKET, $buf, 0; sleep$senddelay;...
eXtremail 2.1.1 - Remote Heap Overflow (PoC)
eXtremail 2.1.1 - Remote Heap Overflow PoC !/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n";...
OpenSSL DTLS远程堆溢出漏洞
BUGTRAQ ID: 26055 CVECAN ID: CVE-2007-4995 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL的DTLS支持中存在漏洞，攻击者可以创建能够触发堆溢出的恶意客户端或服务器，导致执行任意指令。 请注意这个漏洞仅影响使用DTLS的应用程序。 OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 RedHat Linux 5.0 OpenSSL Project ---------------...
Microsoft Word Malformed String Memory Corruption (MS07-060; CVE-2007-3899)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word for MAC. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Word Mac file with a malformed string. Successful exploitation of...
Kodak Image Viewer TIFF image handling vulnerability
Added: 10/15/2007 CVE: CVE-2007-2217 BID: 25909 OSVDB: 37627 Background The Windows Kodak Image Viewer is a utility for rendering various image formats. It is included in Windows 2000, and may also be present on newer versions of Windows if a computer was upgraded from Windows 2000. Problem A...
apache-disclose.txt
!/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use...
ex211heap-overflow.txt
!/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n"; sendSOCKET, $buf, 0; sleep$senddelay;...
XSS vulnerability
PMASA-2007-5 Announcement-ID: PMASA-2007-5 Date: 2007-10-15 Summary XSS vulnerability Description We received an advisory from Omer Singer, The DigiTrust Group, and we wish to thank him for his work. It was possible to trigger this attack on setup.php. Severity We consider this vulnerability to b...
DSA-1387-1 librpcsecgss
Bulletin has no description...
Immunity Canvas: JOOMLAFLASHUP_INCLUDE
Name| joomlaflashupinclude ---|--- CVE| CVE-2007-5457 Exploit Pack| CANVAS Description| Joomla FlashUploader Component Remote File Inclusion Notes| CVE Name: CVE-2007-5457 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2886 CVE Url:...
CVE-2007-5457
CVE-2007-5457: Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 is affected by multiple PHP remote file inclusion vulnerabilities. The root cause is improper handling of the mosConfig_absolute_path parameter, enabling an attacker to specify a URL to install.joomla_flash_uploader...
CVE-2007-5458
CVE-2007-5458 describes an SQL injection in index.php of the KwsPHP newsletter module 1.0. The vulnerability occurs when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the newsletter parameter. This is supported by multiple connected records (NVD/NVD listing, ...
Buffer overflow
Buffer overflow in the DB Software Laboratory VImpX VImpAX1 ActiveX control in VImpX.ocx 4.7.3.0 allows remote attackers to execute arbitrary code via a long RejectedRecordsFile parameter, a different vector than CVE-2007-2667...
Immunity Canvas: JOOMLACOLORLAB_INCLUDE
Name| joomlacolorlabinclude ---|--- CVE| CVE-2007-5451 Exploit Pack| CANVAS Description| Joomla comcolorlab Component Remote File Inclusion Notes| CVE Name: CVE-2007-5451 VENDOR: Joomla Repeatability: Infinite References: http://www.osvdb.net/show/osvdb/40609 CVE Url:...