MIT Kerberos buffer overflow

Buffer overflow on oversized string in RPC library svcauthgssvalidate function...

MyServer privilege escalation

suid is called before sgid for CGI applications...

linux/x86 /sbin/iptables -F 40 bytes

Exploit for linux/x86 platform in category shellcode ==================================== linux/x86 /sbin/iptables -F 40 bytes ==================================== / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush iptables for Linux x86 section .text global start start: ;...

Mac OS X syscall DoS

Arguments of sharedregionmapfilenp syscall are not checking, making it's possible to exhaust all available memory...

Mac OS X fpathconf() DoS

fpathconf call for unsupported file type causes system panic...

Solaris 8 (x86) : 108828-40

SunOS 5.8x86: /usr/lib/libthread.so.1 pat. Date this patch was last updated by Sun : Feb/07/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 110648-40

Sun Cluster 3.0: Core/Sys Admin Patch. Date this patch was last updated by Sun : Nov/28/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Multiple PHP4/PHP5 vulnerabilities

INFIGO IS Security Advisory ADV-2006-04-02 http://www.infigo.hr/ Title: Multiple PHP4/PHP5 vulnerabilities Advisory ID: INFIGO-2006-04-02 Date: 2006-04-24 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2006-04-02 Impact: Remote code execution and DoS Risk Level: Medium...

Multiple vulnerabilities in Cube engine 2005_08_29

Luigi Auriemma Application: Cube engine http://www.cubeengine.com Versions: = 20050829 Platforms: Windows, nix, BSD and MacOS Bugs: A sgetstr buffer-overflow B invalid memory access C clients crash through invalid map Exploitation: remote, versus both server and clients Date: 06 Mar 2006 Author:...

linux/x86 -execve /bin/sh anti-ids 40 bytes

linux/x86 execve /bin/sh anti-ids 40 bytes. Shellcode exploit for linx86 platform / N Shell : shellcodez Arch:x86 Platform:linux Size:40 Description: The shellcode to execute /bin/sh; This shellcode is anti-ids It not containz encoding engine but it not contain standart signatures as: "\xcd\x80"...

linux/x86 execve /bin/sh anti-ids 40 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 execve /bin/sh anti-ids 40 bytes ========================================== / N Shell : shellcodez Arch:x86 Platform:linux Size:40 Description: The shellcode to execute /bin/sh; This shellcod...

Windows PHP buffer overflow

mysqlconnect buffer overflow...

iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability

Multiple Vendor Insecure Call to CreateProcess Vulnerability iDEFENSE Security Advisory 11.15.05 www.idefense.com/application/poi/display?id=340&type=vulnerabilities November 15, 2005 I. BACKGROUND The Microsoft Windows API includes the CreateProcess function as a means to create a new process an...

Apple iTunes code execution

CreateProcess is used insecurely on external application execution...

[Full-disclosure] Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHP registerglobals Activation Vulnerability in parsestr Release Date: 2005/10/31 Last Modified: 2005/10/31 Author: Stefan Esser [email protected] Application: PHP4 =...

CVE-2005-3064: Undefined Security Weakness

MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day motd.txt...

CVE-2005-3065: Improper Restriction of Operations within the Bounds of a Memory Buffer

MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service application crash via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read...

GLSA-200507-17 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-17 Mozilla Thunderbird: Multiple vulnerabilities The following vulnerabilities were found and fixed in Mozilla Thunderbird: 'mozbugra4' and 'shutdown' discovered that Thunderbird was improperly cloning base objects MFSA...

CVE-2000-0487

CVE-2000-0487 : The Protected Store in Windows 2000 does not properly select the strongest available encryption, defaulting to 40-bit instead of 56-bit DES. The description confirms a weak encryption fallback, with referenced advisory MS00-032. No exploitation details are provided in the initial ...

CVE-2000-0487: Undefined Security Weakness

The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...