CVE-2008-3286

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3286

CVE-2008-3286 affects SWAT 4 (version 1.1 and earlier). The issue is a remote denial of service caused by specific commands (VERIFYCONTENT, GAMECONFIG) sent to the server before user session initialization, triggering a NULL pointer dereference, or by a GAMESPYRESPONSE command followed by a long ...

RHEL 4 / 5 : thunderbird (RHSA-2008:0616)

Updated thunderbird packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup clien...

Sun Java Web Start JNLP file j2se element heap-size buffer overflow

Added: 07/23/2008 CVE: CVE-2008-3111 BID: 30148 OSVDB: 46959 Background Sun Java Web Start allows standalone Java applications, called JNLP files, to be executed by the Java Runtime Environment JRE. Problem A buffer overflow vulnerability in Sun Java Web Start allows command execution when the us...

Sun Java Web Start JNLP file j2se element heap-size buffer overflow

Added: 07/23/2008 CVE: CVE-2008-3111 BID: 30148 OSVDB: 46959 Background Sun Java Web Start allows standalone Java applications, called JNLP files, to be executed by the Java Runtime Environment JRE. Problem A buffer overflow vulnerability in Sun Java Web Start allows command execution when the us...

SWAT 4 - Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/30299/info SWAT 4 is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle certain input. An attacker may exploit these issues to crash the affected application, denying service to legitimate users...

Design/Logic Flaw

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ colon slash sequence, followed by the role name, to the username...

RHEL 4 : firefox (RHSA-2008:0598)

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. An integer overflow flaw was found in...

CentOS 4 : firefox (CESA-2008:0598)

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. An integer overflow flaw was found in...

Outlook Express 6 恶意附件保护绕过漏洞

BUGTRAQ ID: 3271 微软OutLook Express 6中带了一个新的安全特性，额可以阻止用户打开或者保存可能有 害的附件。 然而，这个特性存在一个漏洞。攻击者可以通过在邮件中嵌入一个frame来绕过上述保护。 当攻击者在frame中嵌入一个".exe"或者“.bat"文件时，如果用户试图打开这个文件，恶 意程序可能被执行。用户也可以将其保存在硬盘上。 Microsoft Outlook Express 6.0 - Microsoft Windows ME - Microsoft Windows 98se - Microsoft Windows 98 - Microsof...

CentOS 4 / 5 : openldap (CESA-2008:0583)

Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP...

RHEL 4 / 5 : ruby (RHSA-2008:0561)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0561 advisory. Ruby is an interpreted scripting language for quick and easy object-oriented programming. Multiple integer overflows leading to a heap...

CVE-2003-1560

Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, allowing remote attackers to read Referer log data and obtain potentially sensitive information. The provided documents do not specify broader impact, affected versions beyond Netscape 4, or concrete remediati...

CVE-2003-1560

Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data...

php escapeshellcmd multibyte encoding vulnerability analysis and extension-a vulnerability warning-the black bar safety net

漏洞 公告 在 http://www.sektioneins.de/advisories/SE-2008-03.txt PHP 5 = 5.2.5 PHP 4 = 4.4.8 Some allow as GBK, EUC-KR, SJIS, etc. wide byte character set systems may be affected by this impact, the impact is still very large, the domestic virtual host should be the pass to kill, in testing this...

CVE-2008-3136

SQL injection vulnerability in catalogue.php in AShop Deluxe 4.x allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-3136

The CVE-2008-3136 entry concerns a SQL injection in AShop Deluxe 4.x. Affected software: AShop Deluxe (version family 4.x). Vulnerable component: catalogue.php, with exploitation via the cat parameter. Root cause: unsanitized input leading to arbitrary SQL execution. Impact: partial confidentiali...

phpnuke4ndvddb-sql.txt

Module's Name: 4ndvddb Module's Version: 0.91 +---------------------------------------+ | SQL Injection Vulnerability PHP-NUKE | Module's Name: 4ndvddb | Module's Version: 0.91 | | found by lovebug | | RBT-4 | www.rbt-4.net +---------------------------------------+ vuln:...

Stack overflow

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by a an application that grants itself...

CVE-2008-3082

Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...