CVE-2007-0264

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted...

CVE-2007-0264

CVE-2007-0264 affects WinZip 9.0 via a buffer overflow in Winzip32.exe triggered by a long command line argument. It may allow a local attacker to crash the application and potentially execute arbitrary code; in some setups it could cross privilege boundaries if untrusted filenames invoke Winzip3...

WinZip 9.0 - Command Line Remote Buffer Overflow

source: https://www.securityfocus.com/bid/22020/info WinZip is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to cause denial-of-service...

Berlios GPSD <= 2.7 Remote Format String Exploit (meta)

No description provided by source. package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb senotier at enseirb.fr', ,...

ibmwebsphere-bypass.txt

SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...

Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxstart.sys' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...

Solaris 2.6 (sparc) : 104272-13

The remote host is missing Sun Security Patch number 104272-13 Solstice X.400 9.0 Messaging Server Patch. Date this patch was last updated by Sun : Thu Nov 17 06:22:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 2.5.1 (sparc) : 104272-13

The remote host is missing Sun Security Patch number 104272-13 Solstice X.400 9.0 Messaging Server Patch. Date this patch was last updated by Sun : Thu Nov 17 06:22:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 2.6 (i386) : 104274-13

The remote host is missing Sun Security Patch number 104274-13 Solstice X.400 9.0 Messaging Server Patchx86. Date this patch was last updated by Sun : Fri Dec 07 03:59:23 MST 2001 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has bee...

Solaris 2.5.1 (i386) : 104273-13

The remote host is missing Sun Security Patch number 104273-13 Solstice X.400 9.0 Client Toolkit Patchx86. Date this patch was last updated by Sun : Thu Nov 17 06:26:41 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

hztty 2.0 Local root exploit (Tested on Red Hat 9.0)

No description provided by source. / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA 385-1 note I adjusted some part of hztty's code since there were some errors. hope this will not influence exploitation : tested against Red Hat 9.0 : c0wboy@0x333 c0wboy$ gcc...

xtokkaetama 1.0b Local Game Exploit (Red Hat 9.0)

No description provided by source. / xtokkaetama 1.0b local game exploit on Red Hat 9.0 Coded by brahma 31/07/2003 http://www.debian.org/security/2003/dsa-356 / include stdlib.h define RETADDR 0xbfffff11 define DEFAULTBUFFERSIZE 29 define DEFAULTEGGSIZE 512 define NOP 0x90 define BIN...

AOL YGPPDownload ActiveX控件堆溢出漏洞

America Online 9.0 Security Edition是美国在线发布的基于Internet Explorer技术的客户端软件，可提供安全性和可用性功能。 AOL的YGPPDownload ActiveX控件（YGPPicDownload.dll）在处理对AddPictureNoAlbum方式及downloadFileDirectory属性的输入时存在两个堆溢出漏洞，可能允许攻击者在用户浏览器中执行任意指令。 AOL AOL 9.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.aol.com/...

CVE-2006-4819

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag long link address...

Design/Logic Flaw

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

CVE-2006-0948

CVE-2006-0948 concerns AOL 9.0 Security Edition revision 4184.2340 (and potentially other versions) where the installer/directory permissions grant Everyone Full Control on the America Online 9.0 directory, enabling local users to replace or manipulate critical files. Root cause is insecure defau...

CVE-2006-0948

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

(Updated) Specially crafted JPEG images enables the execution of arbitrary code. – Opera Security Advisories

Updated Specially crafted JPEG images enables the execution of arbitrary code. – Opera Security Advisories OPCOM Team | July 5, 2006 Summary A specially crafted JPEG image can enable the execution ofarbitrary code. Severity: Critical Affected versions: Versions prior to 9.0 of Opera forMicrosoft...

Symantec Ghost: Local access vulnerabilities in Database

SUMMARY Symantec engineers updated the db component to address three local access vulnerabilities discovered in the database installed with Symantec Ghost and the Central Management Console in Symantec Ghost Solutions Suite SGSS 1.0. Exploitation of any of these issues requires physical access to...