117 matches found
[ MDVSA-2009:345 ] acl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:345 http://www.mandriva.com/security/ Package : acl Date : December 28, 2009 Affected: 2009.0, 2009.1, 2010.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in acl:...
CVE-2009-4411
The 1 setfacl and 2 getfacl commands in XFS acl 2.2.47, when running in recursive -R mode, follow symbolic links even when the --physical aka -P or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack...
CVE-2009-4411
CVE-2009-4411 concerns the acl feature in XFS ACL 2.2.47. The setfacl and getfacl utilities, when run in recursive (-R) mode, follow symbolic links even if --physical (-P) or -L is specified. This could allow a local attacker to manipulate ACLs on arbitrary files or directories via a symlink atta...
Mercury/32 <= v4.01b PH Server Module Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32 %...
CVE-2008-4411
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663...
CVE-2008-4411
HP System Management Homepage (SMH) for Linux/Windows is vulnerable to a cross-site scripting (XSS) issue in versions before 2.1.15.210. A remote attacker can exploit unspecified vectors to inject arbitrary HTML/script in the user’s browser. This is tracked as CVE-2008-4411. HP provided a fixed r...
CVE-2008-4411
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-1663...
[security bulletin] HPSBMA02376 SSRT080099 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01570589 Version: 1 HPSBMA02376 SSRT080099 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin shoul...
Lighttpd < 1.4.19 Information Disclosure
Binary data 4411.prm...
CVE-2007-4411
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
CVE-2007-4411
CVE-2007-4411 affects ircu 2.10.12.05 and earlier. The issue allows remote attackers to reveal the hidden IP address of arbitrary +x users by issuing a sequence of /silence commands using either (1) CIDR mask arguments or (2) other arguments that map to IP groups, and then observing CTCP ping rep...
CVE-2006-4411
The CVE-2006-4411 issue affects Apple Mac OS X VPN service in 10.3.x up to 10.3.9 and 10.4.x up to 10.4.8. The root cause is that the VPN service does not properly clean the environment when executing commands, which can allow a local user to gain system privileges via unspecified vectors. Exploi...
Mercury/32 PH Server Module Buffer Overflow
This module exploits a stack-based buffer overflow in Mercury/32 'Mercury/32 PH Server Module Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow in Mercury/32 'MC', 'License' = MSFLICENSE, 'References' = 'CVE', '2005-4411' , 'OSVDB', '22103', 'BID', '16396' , ...
Mercury Mail Transport System Phonebook service buffer overflow
Added: 02/02/2006 CVE: CVE-2005-4411 BID: 16396 OSVDB: 22103 Background Mercury Mail Transport System is a free mail server for Windows and Netware platforms. It includes a Phone Book service which runs on port 105/TCP. Problem A buffer overflow vulnerability in the Phone Book service allows remo...
Mercury Mail Transport System Phonebook service buffer overflow
Added: 02/02/2006 CVE: CVE-2005-4411 BID: 16396 OSVDB: 22103 Background Mercury Mail Transport System is a free mail server for Windows and Netware platforms. It includes a Phone Book service which runs on port 105/TCP. Problem A buffer overflow vulnerability in the Phone Book service allows remo...
CVE-2005-4411
CVE-2005-4411 describes a stack-based buffer overflow in Mercury Mail Transport System’s Phone Book (PH) service running on TCP port 105. The flaw arises from insufficient bounds checking when handling user-supplied data in the PH Server Module, enabling remote code execution on affected Windows ...