CVE-2011-5005

The CVE-2011-5005 issue affects QuiXplorer versions 2.3 and earlier, where an unrestricted/arbitrary file upload via the index.php upload action allows an attacker to upload a file with an executable extension and then access it directly, enabling remote code execution in the webserver process. C...

CVE-2011-5008

CVE-2011-5008 is an integer overflow in the GatewayService of 3S CoDeSys (versions affected: CoDeSys 2.3 and 3.4; patched in V3.5 and V2.3.9.32). A large size value in the packet header enables remote attackers to trigger a heap-based buffer overflow and potentially execute arbitrary code. Attack...

CVE-2011-4862

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as...

Unfixed XSS vulnerability at www.newsroomamerica.com

Security researcher IrIsT.Ir, has submitted on 25/12/2011 a cross-site-scripting XSS vulnerability affecting www.newsroomamerica.com, which at the time of submission ranked 876106 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It i...

Unfixed XSS vulnerability at www.opentopia.com

Security researcher Sony, has submitted on 25/12/2011 a cross-site-scripting XSS vulnerability affecting www.opentopia.com, which at the time of submission ranked 100131 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currentl...

CVE-2011-4362

Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...

CVE-2011-4362

Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...

CVE-2011-3839

The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hbWU cookie...

CVE-2011-3837

Directory traversal vulnerability in blogsystem/datafunctions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the preview parameter to index.php...

CVE-2011-3378

RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to 1 the...

CVE-2011-4362

Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service segmentation fault via crafted base64 input that triggers an out-of-bounds...

CVE-2011-3372

CVE-2011-3372 affects Cyrus IMAPd 2.4.x NNTP server (nntpd): remote attackers can bypass authentication by sending AUTHINFO USER without a subsequent AUTHINFO PASS. The issue is fixed in Cyrus IMAPd 2.4.12 and in various advisories (e.g., MiracleLinux AXSA-2012-23) that reference CVE-2011-3372. A...

CVE-2011-3837

CVE-2011-3837 concerns a directory traversal vulnerability in Wuzly 2.0. The affected component is blog_system/data_functions.php, with the root cause being improper handling of the preview parameter in index.php, allowing remote attackers to read arbitrary files via .. (dot dot). Public referenc...

CVE-2011-3839

Summary: CVE-2011-3839 affects Wuzly 2.0. The vulnerability is an authentication bypass in the administration functionality caused by setting the dXNlcm5hbWU cookie, enabling remote attackers to bypass authentication. The impact per the metrics is partial confidentiality, integrity, and availabil...

CVE-2011-4362

CVE-2011-4362 affects lighttpd: a signedness error in the base64_decode routine used by HTTP authentication (http_auth.c) can trigger an out-of-bounds read with a negative index, allowing a remote attacker to cause a denial of service (segmentation fault). Impacted versions are lighttpd 1.4 befor...

CVE-2011-3835

Wuzly 2.0 contains multiple cross-site scripting (XSS) vulnerabilities that allow remote injection of scripts via numerous parameters in admin/, mobile/, and index.php pages (e.g., Referer header in admin/login.php/admin/404.php, q in search.php, theme_name in theme_settings.php, username in admi...

CVE-2011-3372

imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...

CVE-2011-3838

Technical details about CVE-2011-3838 are not publicly provided in the connected documents. The available sources only reiterate SQL injection in Wuzly 2.0 without version/impact details. Monitor for updates.

[SECURITY] [DSA 2371-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2371-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 24, 2011 http://www.debian.org/security/faq -...

Winamp 5.x 多个整数溢出漏洞

BUGTRAQ ID: 51015 CVE ID: CVE-2011-3834,CVE-2011-4857 Winamp是流行的通用音乐播放器。 Winamp在实现上存在多个整数溢出漏洞，攻击者可利用这些漏洞执行任意代码。 1）当使用流标头分配内存时，inavi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。 2）在使用RIFF INFO块尺寸值分配内存时，inavi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。 0 Nullsoft Winamp 5.x 厂商补丁： Nullsoft --------...