CVE-2011-5272

SQL injection vulnerability in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary SQL commands via the vpsnote parameter to dtcadmin/logPushlet.php. NOTE: this issue was originally part of CVE-2011-3197, but that ID was SPLIT due to different...

CVE-2011-5275

The CVE affects Domain Technologie Control (DTC) installations where the install script before version 0.34.1 erroneously grants sudo permissions for chrootuid to the dtc user, enabling potential privilege escalation. Root cause: the installer script configures sudo access for dtc, increasing the...

CVE-2011-5273

CVE-2011-5273 : Domain Technologie Control (DTC) before 0.34.1 has a directory traversal flaw in the shared/package-installer component. An authenticated remote user can craft a problematic pkg parameter in a do_install action to dtc/ to trigger arbitrary PHP code execution. Root cause is imprope...

CVE-2011-5272

Affected product: Domain Technologie Control (DTC) prior to 0.34.1. Vulnerability: SQL injection via the vps_note parameter to dtcadmin/logPushlet.php, allowing remote authenticated users to execute arbitrary SQL commands. Root cause (as stated): input handling leads to SQL injection; CVE-2011-52...

CVE-2011-3198

Domain Technologie Control DTC before 0.34.1 includes a password in the -b command line argument to htpasswd, which might allow local users to read the password by listing the process and its arguments...

CVE-2011-5276

CVE-2011-5276 is a SQL injection vulnerability in Domain Technologie Control (DTC) prior to 0.32.11. The flaw occurs in the drawAdminTools_PackageInstaller function, within shared/inc/forms/packager.php, where the database_name parameter can be exploited by remote authenticated users to execute a...

CVE-2011-3195

CVE-2011-3195 affects Domain Technologie Control (DTC) prior to 0.34.1. The vulnerability is in shared/inc/sql/lists.php where remote authenticated users can execute shell commands via metacharacters in mailing list tunable options, enabling command execution with the potential for partial impact...

CVE-2011-3197

Summary: CVE-2011-3197 refers to an SQL injection in Domain Technologies Control (DTC) before version 0.34.1. The vulnerability can be triggered by unsafely handling user-provided parameters in web forms. The original CVE-2011-3197 has been split; CVE-2011-5272 covers the vps_note parameter path ...

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service http://cxsecurity.com/ YouTube Kaspersky PoC: https://www.youtube.com/watch?v=joa9IS7U90 ---- 0. Where is the problem? ---- Some time ago I have reported vulnerabilities in regcomp in BSD implementation CVE-2011-3336 and GNU li...

OS X / Safari / Firefox REGEX Denial Of Service

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service http://cxsecurity.com/ ---- 0. Where is the problem? ---- Some time ago I have reported vulnerabilities in regcomp in BSD implementation CVE-2011-3336 and GNU libc implementation CVE-2010-4051 CVE-2010-4052. Now is the time for...

MS11-049: Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893) (uncredentialed check)

An application on the remote host has an information disclosure vulnerability. When parsing a specially crafted Web Service Discovery .disco file, external XML entities are allowed for untrusted user input. A remote attacker could exploit this by tricking a user into opening a specially crafted...

CVE-2011-3153

CVE-2011-3153 affects LightDM (Light Display Manager). The vulnerability is in dmrc.c and allows local users to read arbitrary files via a symlink attack on ~/.dmrc, valid for LightDM versions before 1.1.1. Impact is local confidentiality exposure; no remote access required. OpenSUSE and SUSE adv...

AIX 5.3 TL 12 : bos.net.tcp.client (U846347)

The remote host is missing AIX PTF U846347, which is related to the security of the package bos.net.tcp.client. Vulnerability which allows remote attackers to 1 register or 2 unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess...

Ubuntu: Security Advisory (USN-2122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4696

Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. dot dot in the filesignature in a GetPhotoStatus request...

CVE-2011-4696

CVE-2011-4696: A directory traversal in Eye-Fi Helper before 3.4.23 allows an attacker to create arbitrary files via .. in the filesignature of a GetPhotoStatus request. The issue could enable overwriting arbitrary files and may lead to DoS or arbitrary code execution. Affected product: Eye-Fi He...

Wireshark DECT Dissector Stack Buffer Overflow - Ver2 (CVE-2011-1591)

A stack buffer overflow vulnerability has been reported in Wireshark DECT dissector. The vulnerability is caused due to improper bounds checking. A remote attacker can exploit this vulnerability by enticing a user to read a specially crafted packet trace file. Successful exploitation would allow ...

Oracle Java FileDialog.Show Heap Buffer Overflow - Ver2 (CVE-2011-0802)

A remote code execution vulnerability has been reported in Oracle Java Runtime Environment.The vulnerability is due to insufficient validation of the selected file's default values size. A remote attacker could exploit this vulnerability by enticing an unsuspecting user to open a web page...

Microsoft Office Excel Record Parsing Use After Free (MS11-072) - Ver2 (CVE-2011-1986)

A remote code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to lack of validation of certain record structures while handling specially crafted Excel files. A remote attacker could trigger this vulnerability by enticing an unsuspecting user to open ...

PHP5 Hash Collision Denial Of Service - Ver2 (CVE-2011-4885)

A denial-of-service vulnerability has been reported in PHP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...