Fedora Core 5 : gnupg-1.4.7-1 (2007-316)

This updates GnuPG to version 1.4.7, changing the default behavior so that gnupg now flags message streams which contain multiple plaintexts as an error. This prevents errors which would occur when applications which called gnupg assumed that this was already the default behavior. Note that Tenab...

RE: MSIE7 browser entrapment vulnerability (probably Firefox, too)

Tested on Opera 9.20 build 8713 with JRE 1.5 resulting in the following behaviour: After loading the initial site http://lcamtuf.coredump.cx/ietrap/ I couldn't navigate away to google.com etc, however Opera correctly displayed http://lcamtuf.coredump.cx/ietrap/ in the address bar, thus no real...

CVE-2007-1093

Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager NNM before 07-10-05, and before 08-00-02 in the 08-x series, allow remote attackers to execute arbitrary code, cause a denial of service, or trigger invalid Web utility behavior...

CVE-2007-1093

Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager NNM before 07-10-05, and before 08-00-02 in the 08-x series, allow remote attackers to execute arbitrary code, cause a denial of service, or trigger invalid Web utility behavior...

CVE-2006-6967

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. In addition, it describes...

Trojan free kill technology the large inventory and antivirus settings-vulnerability and early warning-the black bar safety net

In the antivirus software growing strong campaign, with a Only is not killing the Trojans, has become the the majority of hacker enthusiasts desire. But is not killing the Trojans, released that day, it means that it has 命不久已 it. Teach a man to fish than teach a man to fish, so we launched thisfr...

WIDER : Social Engineering

Social engineering Professional programming Sequential hack one. Introduction 2. social engineering 3. Extraction of information. Social engineering. Sequential hack. four. Finding and processing information. 5. Some ways to divorce people. 6. Human denial of service HDoS 7. Advanced methods...

Complaints QQ game points vulnerability-vulnerability warning-the black bar safety net

A few months before. QQ game problems. In some room you can use the QQ game of the vulnerability of the brush. And I some time ago met a people called the bottom price sale two of a kind high number of people. Add me multiple times. Say want to sell to me. And given the price is also quite cheap!...

Debian DSA-1137-1 : tiff - several vulnerabilities

Tavis Ormandy of the Google Security Team discovered several problems in the TIFF library. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2006-3459 Several stack-buffer overflows have been discovered. - CVE-2006-3460 A heap overflow vulnerability in the...

Debian DSA-1075-1 : awstats - programming error

Hendrik Weimer discovered that awstats can execute arbitrary commands under the user id the web-server runs when users are allowed to supply arbitrary configuration files. Even though, this bug was referenced in DSA 1058 accidentally, it was not fixed yet. The new default behaviour is not to acce...

Escalation of privileges in Outpost and Lavasoft Firewalls -Unusual ShellExecute behavior

Vulnerable Products: Outpost Firewall Pro ver. 3.51.759.6511 462 And Lavasoft Personal Firewall ver. 1.0.543.5722 433 Summary of problem: The firewall runs its windows under a SYSTEM context. A user with lower privileges than SYSTEM could locate the open folder control on some of these windows,...

[slackware-security] Apache httpd redux

New Apache packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a bug with Apache 1.3.35 and glibc that breaks wildcards in Include directives. It may not occur with all versions of glibc, but it has been verified on -current using an Include within a file...

[Full-disclosure] Fun with DHTML

How bugs can you find in your browser? The recent IE issues only scratched the service of the DHTML/behavior bugs. The HTML/JS page below can be used to find all sorts of bugs in different browsers. I stopped caring about these after the first three invalid derefences...

[SA18846] Libapreq2 Unspecified Vulnerability

TITLE: Libapreq2 Unspecified Vulnerability SECUNIA ADVISORY ID: SA18846 VERIFY ADVISORY: http://secunia.com/advisories/18846/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Libapreq2 2.x http://secunia.com/product/8138/ DESCRIPTION: A vulnerability has been reported in Libapreq2...

Authentication flaw

profile.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified 1 action, 2 passwd, 3 adminpassword, 4 newpasswd, and 5 confirmpasswd variables, which are not...

CVE-2006-0724

profile.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified 1 action, 2 passwd, 3 adminpassword, 4 newpasswd, and 5 confirmpasswd variables, which are not...

A springboard for attack and Defense-bug warning-the black bar safety net

Hackers in the attack will borrow from other systems to their own purposes, such as for the next target of the attack and occupied the computer itself use, and so on. This article describes the common hacker to the usurped computer use and Security Administrator to the appropriate response method...

Double-clicking a link can run a program from the Internet

Links in Web pages only require a single click. When a userdouble-clicks on a Web link, that action is taken as twoseparate clicks: One to follow the link, and the other toany dialog that might appear where the link was.A specially crafted page can place the link so that the"Open" button in the...

Fedora Core 3 : perl-5.8.5-22.FC3 (2005-1145)

o Updated upstream fix for sprintf integer overflow vulnerabilities CVE-2005-3962 and CVE-2005-3912, including new Sys::Syslog 0.08 o Updated fix for bug 136009 / MakeMaker LDRUNPATH issue: restore previous default Red Hat behavior of removing the MakeMaker generated LDRUNPATH setting from the li...

Kadu remote DoS

Hi. Kadu is a Gadu-Gadu instant messaging open source client. By sending message with richtext ,image basic informations and nothing else to speciffic UIN thru Gadu-Gadu server Kadu is stopping to respond or is shutting down immidietly. Behavior depends on version 0.4.2 In most cases Kadu freezes...