ASMAX AR 804 gu Web Management Console - Arbitrary Command Execution

ASMAX 804 gu router is a SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. There is an unauthenticated maintenance script named 'script' in /cgi-bin/ directory of the web management interface. 3. When 'system' paramether is passed to the script it allows running OS shell...

CVE-2009-1669

CVE-2009-1669 affects the Smarty template engine (Smarty 2.6.22) via the smarty_function_math plugin. The vulnerability allows a context-dependent attacker to execute arbitrary commands through shell metacharacters placed in the equation attribute of the math function, enabling remote code execut...

Sun IDM Arbitrary Command Execution

1 Summary Affected Software: Sun IDM 7.1, 8.0 Vendor URL: http://www.sun.com/ Severity: Medium 2 Description Sun Identity Manager facilitates centralized identity provisioning for variety of application and platforms. Its web interface allows end users to request password change. To handle such...

HP-UX Update for dtterm HPSBUX00309

Check for the Version of dtterm OpenVAS Vulnerability Test HP-UX Update for dtterm HPSBUX00309 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

aMule 'wxExecute()'任意命令执行漏洞

BUGTRAQ ID: 34683 CNCAN ID：CNCAN-2009042301 aMule是一款与eMule类似的电驴下载软件。 aMule不正确过滤部分字符，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 存在问题的代码src/DownloadListCtrl.cpp： command = wxT"xterm -T "aMule Preview" -iconic -e mplayer '$file'"; ... wxString rawFileName = file-GetFullName.GetRaw; command.ReplacewxT"$file",...

Fedora 10 : lynx-2.8.6-18.fc10 (2008-9952)

Fri Nov 7 2008 Jiri Moskovcak - 2.8.6-18 - Fixed CVE-2008-4690 lynx: remote arbitrary command execution. via a crafted lynxcgi: URL thoger Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

Ubuntu Update for xen-3.0 vulnerability USN-527-1

Ubuntu Update for Linux kernel vulnerabilities USN-527-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5271.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xen-3.0 vulnerability USN-527-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

RedHat Update for lynx RHSA-2008:0965-01

Check for the Version of lynx OpenVAS Vulnerability Test RedHat Update for lynx RHSA-2008:0965-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for lynx RHSA-2008:0965-01

Check for the Version of lynx OpenVAS Vulnerability Test RedHat Update for lynx RHSA-2008:0965-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for lynx CESA-2008:0965 centos4 i386

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for lynx CESA-2008:0965-01 centos2 i386

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for lynx CESA-2008:0965 centos3 i386

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for lynx CESA-2008:0965 centos3 x86_64

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for lynx CESA-2008:0965 centos3 i386

Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Microsoft Excel未明远程代码执行漏洞

BUGTRAQ ID: 33870 CNCAN ID：CNCAN-2009022404 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Excel存在未明问题，远程攻击者可以利用漏洞以运行此程序的用户上下文执行任意指令。 目前没有详细漏洞细节提供。Symantec报告此漏洞，目前检测名为'Trojan.Mdropper.AC'。 Microsoft Excel 2007 SP1 Microsoft Excel 2007 厂商解决方案 目前没有解决方案提供： http://office.microsoft.com/excel...

CVE-2008-6235

The Netrw plugin netrw.vim in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the 1 "D" delete command or 2 b:netrwcurdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases...

CVE-2008-6235

CVE-2008-6235 affects Vim 7.0/7.1 through the netrw.vim plugin, which allows command execution via shell metacharacters in filenames used by the D (delete) command or b:netrw_curdir. Exploitation could lead to arbitrary code execution. Public fixes exist (e.g., advisories RHSA-2008:0580 and OpenS...

Sql injection

SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitrary SQL commands via the recid parameter...

PyCrypto ARC2模块缓冲区溢出漏洞

BUGTRAQ ID: 33674 CVECAN ID: CVE-2009-0544 PyCrypto是使用Python编写的加密工具包。 PyCrypto的ARC2模块中存在缓冲区溢出漏洞，如果远程攻击者在发送的请求中包含有超长的ARC2密钥长度的话，就可以触发这个溢出，导致拒绝服务或执行任意指令。 Dwayne C. Litzenberger PyCrypto 2.0.x 厂商补丁： Dwayne C. Litzenberger ---------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...