Missing privilege level checks in x86 emulation of software interrupts

ISSUE DESCRIPTION The emulation of instructions which generate software interrupts fails to perform supervisor mode permission checks. However these instructions are not usually handled by the emulator. Exceptions to this are - when a memory operand implicit for the affected instructions lives in...

FreeBSD 3.3,Linux Mandrake 7.0 'xsoldier' Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/871/info Certain versions of FreeBSD 3.3 Confirmed and Linux Mandrake confirmed ship with a vulnerable binary in their X11 games package. The binary/game in question, xsoldier, is a setuid root binary meant to be run via ...

Fusion News 3.3 Unauthorized Account Addition Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8441/info Fusion News is prone to an access validation error allowing a user to add arbitrary user/administrator accounts through manipulating URI parameters. Successful exploitation of this error may allow a user to...

WFTPD 3.3 - Remote REST DoS

No description provided by source. WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print Usage: wftpdkill host login password existingfle\n def dosithostname, username, passwd, exfile: sock = socket.socketsocket.AFINET,...

ScriptFTP 3.3 - Remote Buffer Overflow (MSF)

No description provided by source. Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class Metasploit3 Msf::Exploit::Remo...

Gold MP4 Player 3.3 - Buffer Overflow PoC (SEH)

No description provided by source. ?--------------------------------------------------------------------------------- Exploit Title: GoldMP4Player 3.3 - Buffer Overflow PoC SEH Date: Feb 25 2014 Exploit Author: Gabor Seljan Software Link:...

OpenBSD 3.3 Semget() Integer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8464/info A vulnerability has been discovered in the OpenBSD semget system call. The problem occurs due to insufficient sanity checks before allocating memory using the user-supplied nsems value as an argument. As a resul...

AspDotNetStorefront 3.3 ReturnURL Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10507/info AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the 'returnurl' parameter of the...

FreeBSD 3.3 angband Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/840/info The version angband shipped with FreeBSD 3.3-RELEASE is vulnerable to a local buffer overflow attack. Since it is setgid games, a compromise of files and directories owned by group games is possible. / FreeBSD 3....

Audins Audiens 3.3 unistall.php Authentication Bypass

No description provided by source. source: http://www.securityfocus.com/bid/22728/info Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input...

QtWeb Browser 3.3 - DoS

No description provided by source. Title: QtWeb Browser version 3.3 Dos based in Xss Software:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable Software:http://www.qtweb.net/downloads/QtWeb.exe Version: 3.3 Tested on: Windows Author: PoisonCode Published: 2010-05-17 CVE-ID: | \ / | | | | | ...

OpenSSH 3.x Challenge-Response Buffer Overflow Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to the OpenSSH SSH2...

OpenBSD 3.3/3.4 semctl/semop Local Unexpected Array Indexing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9086/info A local OpenBSD kernel vulnerability has been discovered when handling the semctl and semop system calls. The problem specifically occurs due to improper sanity checking before handling a user-supplied semaphore...

Computalynx CProxy Server 3.3 SP2 Buffer Overflow DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1213/info A buffer overflow DoS vulnerability exists in CProxy Server 3.3 Service Pack 2 / Remote Denial of Service for CProxy v3.3 - Service Pack 2 C |TDP| - HaCk-13 TeaM - 2000 [email protected] This program xploits an...

balitbang cms 3.3 - Multiple Vulnerabilities

No description provided by source. !===========================================================================! CMS Balitbang Edit File Vulnerability Author : Xr0b0t [email protected] Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com Date : 18 Mart, 2010 Tested on...

SiteEnable 3.3 Login.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16009/info SiteEnable is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

QtWeb 3.3 - Remote DoS/Crash Exploit

No description provided by source. Title:QtWeb 3.3 Remote DoS/Crash Exploit Software Link:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable: http://www.qtweb.net/downloads/QtWeb.exe Version: 3.3 Platform:Windows | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | | | | / | || | | | | || ||...

Audins Audiens 3.3 system/index.php Cookie PHPSESSID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/22728/info Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input...

ProjectApp 3.3 links.asp keywords Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16011/info ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

FreeBSD 3.3 gdc Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/834/info There is a buffer overflow vulnerability known to be present in the version of gdc shipped with the 3.3-RELEASE version of FreeBSD. By default, only users in group wheel have execute access to gdc. The overflow...