255 matches found
USN-817-1: Thunderbird vulnerabilities
Several flaws were discovered in the rendering engine of Thunderbird. If Javascript were enabled, an attacker could exploit these flaws to crash Thunderbird...
USN-820-1: Pidgin vulnerability
Federico Muttis discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges...
Ubuntu USN-812-1 (subversion)
The remote host is missing an update to subversion announced via advisory USN-812-1. OpenVAS Vulnerability Test $Id: ubuntu8121.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8121.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-812-1 subversion Authors:...
Ubuntu: Security Advisory (USN-813-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-812-1: Subversion vulnerability
Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...
USN-811-1: Firefox and Xulrunner vulnerability
Juan Pablo Lopez Yacubian discovered that Firefox did not properly display invalid URLs. If a user were tricked into accessing a malicious website, an attacker could exploit this to spoof the location bar, such as in a phishing attack. Furthermore, if the malicious website had a valid SSL...
Compface .xbm Buffer Overflow
!/usr/bin/python Exploit : Compface '.xbm' Local Buffer Overflow Exploit Affected : compface 1.1.5 Tested on : Ubuntu 9.04 without stack randomization Refer : bid/35863 Exploit : His0k4 Use : $compface exploit.xbm out setuid/execve shellcode for Linux/x86 by Marco Ivaldi x86/alphamixed succeeded...
Ubuntu 8.04 LTS / 8.10 / 9.04 : nspr update (USN-810-2)
USN-810-1 fixed vulnerabilities in NSS. This update provides the NSPR needed to use the new NSS. Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service via...
USN-810-1: NSS vulnerabilities
Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service via application crash or execute arbitrary code as the user invoking the program. CVE-2009-2404 Moxie...
Compface 1.1.5 (.xbm File) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Exploit : Compface '.xbm' Local Buffer Overflow Exploit Affected : compface 1.1.5 Tested on : Ubuntu 9.04 without stack randomization Refer : bid/35863 Exploit : His0k4 Use : $compface exploit.xbm out setuid/execve shellcode for Linux/x86 by Mar...
Compface 1.1.5 - .xbm Local Buffer Overflow
Compface 1.1.5 - .xbm Local Buffer Overflow !/usr/bin/python Exploit : Compface '.xbm' Local Buffer Overflow Exploit Affected : compface 1.1.5 Tested on : Ubuntu 9.04 without stack randomization Refer : bid/35863 Exploit : His0k4 Use : $compface exploit.xbm out setuid/execve shellcode for Linux/x...
Compface 1.1.5 (.xbm File) Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits ======================================================== Compface 1.1.5 .xbm File Local Buffer Overflow Exploit ======================================================== !/usr/bin/python Exploit : Compface '.xbm' Local Buffer Overflow Exploit...
Ubuntu USN-803-1 (dhcp3)
The remote host is missing an update to dhcp3 announced via advisory USN-803-1. OpenVAS Vulnerability Test $Id: ubuntu8031.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8031.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-803-1 dhcp3 Authors: Thomas Reinke...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ruby1.8, ruby1.9 vulnerabilities (USN-805-1)
It was discovered that Ruby did not properly validate certificates. An attacker could exploit this and present invalid or revoked X.509 certificates. CVE-2009-0642 It was discovered that Ruby did not properly handle string arguments that represent large numbers. An attacker could exploit this and...
PulseAudio setuid (Ubuntu 9.04 Slackware 12.2.0) - Local Privilege Escalation
PulseAudio setuid Ubuntu 9.04 Slackware 12.2.0 - Local Privilege Escalation PulseAudio setuid Local Privilege Escalation Vulnerability https://www.securityfocus.com/bid/35721 Credit for discovery of bug: Tavis Ormandy, Julien Tinnes and Yorick Koster -- Put files in /tmp/pulseaudio-exp or change...
PulseAudio setuid (Ubuntu 9.04 / Slackware 12.2.0) - Local Privilege Escalation
PulseAudio setuid Local Privilege Escalation Vulnerability https://www.securityfocus.com/bid/35721 Credit for discovery of bug: Tavis Ormandy, Julien Tinnes and Yorick Koster -- Put files in /tmp/pulseaudio-exp or change config.h. Must be on same fs as the pulseaudio binary. Goes faster if you...
PulseAudio (setuid) Priv. Escalation Exploit (ubu/9.04)(slack/12.2.0)
No description provided by source. PulseAudio setuid Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/35721 Credit for discovery of bug: Tavis Ormandy, Julien Tinnes and Yorick Koster -- Put files in /tmp/pulseaudio-exp or change config.h. Must be on same fs as the...
PulseAudio (setuid) Priv. Escalation Exploit (ubu/9.04)(slack/12.2.0)
Exploit for linux platform in category local exploits ===================================================================== PulseAudio setuid Priv. Escalation Exploit ubu/9.04slack/12.2.0 ===================================================================== PulseAudio setuid Local Privilege...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : dbus vulnerability (USN-799-1)
It was discovered that the D-Bus library did not correctly validate signatures. If a local user sent a specially crafted D-Bus key, they could spoof a valid signature and bypass security policies. Note that Tenable Network Security has extracted the preceding description block directly from the...
USN-796-1: Pidgin vulnerability
Yuriy Kaminskiy discovered that Pidgin did not properly handle certain messages in the ICQ protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash...