EnjoySAP 6.47.1 - File Overwrite

EnjoySAP 6.47.1 - File Overwrite Digital Security Research Group DSecRG Advisory DSECRG-09-044 Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.20...

Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference

Przemyslaw Frasunek pisze: FreeBSD = 6.1 suffers from classical check/use race condition on SMP There is yet another kqueue related vulnerability. It affects 6.x, up to 6.4-STABLE. FreeBSD security team was notified on 29th Aug, but there is no response until now, so I won't publish any details...

CVE-2009-0689

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

Debian Security Advisory DSA 1795-1 (ldns)

The remote host is missing an update to ldns announced via advisory DSA 1795-1. OpenVAS Vulnerability Test $Id: deb17951.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1795-1 ldns Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

QNX RTOS 6.4 - '.ELF' Binary File Local Denial of Service

source: https://www.securityfocus.com/bid/33352/info QNX RTOS is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users. QNX RTOS 6.4.0 is vulnerable; other versions may also be affected...

PT-2008-4441 · Microsoft · Windows Media Player +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player version 6.4 Windows Media Format Runtime versions 7.1 through 11 Windows Media Services versions 4.1, 9, and 2008 Description: The issue arises from improper use of the Service Principal Name SPN identifier when...

Stack overflow

Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long string to the 1 open aka SSHFXPOPEN, 2 unlink, 3 opendir, and other unspecified parameters...

CVE-2008-4726

CVE-2008-4726 concerns GoodTech SSH Server 6.4, where the SFTP subsystem is vulnerable to a stack-based buffer overflow. The flaw arises when processing SFTP commands (notably open, unlink, opendir, and related parameters); a sufficiently long argument can overflow a stack buffer, enabling remote...

Gentoo Security Advisory GLSA 200804-10 (tomcat)

The remote host is missing updates announced in advisory GLSA 200804-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200504-05 (Gaim)

The remote host is missing updates announced in advisory GLSA 200504-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 9 : drupal-6.4-1.fc9 (2008-7626)

Update to 6.4, security fixes: SA-2008-047 http://drupal.org/node/295053 - multiple XSS issues CVE-2008-3740, CVE-2008-3741 - unrestricted upload vulnerability CVE-2008-3742 - multiple CSRF issues CVE-2008-3743, CVE-2008-3744 - upload module privilege escalation CVE-2008-3745 Remember to log in t...

CVE-2008-3740

CVE-2008-3740 is an XSS vulnerability in Drupal’s output filter affecting Drupal 5.x up to 5.10 and Drupal 6.x up to 6.4. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Several open-source advisories and vulnerability feeds (e.g., Fedora ...

CVE-2008-2712

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...

CVE-2007-5253

c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte %00 sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif" file. NOTE: this might b...

Cart32 Arbitrary File Download Vulnerability

======================================================================== = Cart32 Arbitrary File Download Vulnerability = = Vendor Website: = http://www.cart32.com = = Affected Version: = -- All releases prior to and including v6.3 = = Public disclosure on Thursday 4th October 2007 =...

CVE-2007-2818

The CVE-2007-2818 entry describes a Cross-site Scripting (XSS) vulnerability in cand_login.asp of CactuSoft Parodia 6.4 and older. The issue allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter. The available documents confirm the affected component and vulne...

CVE-2007-2818

Cross-site scripting XSS vulnerability in candlogin.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter...

CVE-2006-6624

The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service application crash via a long series of "./" sequences in the SIZE command...

IRIX (5.3/6.2/6.3/6.4/6.5/6.5.11) /usr/lib/print/netprint Local Exploit

No description provided by source. !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/lib/print/netprint This code gets released due to another post to the Bugtraq mailing list. For IRIX 6.3 and above this privilage escalation attack can be conducted by local lp users...

gnome_segv local buffer overflow

No description provided by source. / gnomesegv local buffer overflow. Author: Cody Tubbs loophole of hhp. www.hhp-programming.net / [email protected] 12/9/2000 This exploit was coded at overfiens in cali. Shouts to overfien and skeptik... h00t h00t. Bug found by skeptik. Tested on SuSE 6.4/2.2.1...