gAlan 0.2.1 Universal Buffer Overflow Exploit (meta)

Exploit for unknown platform in category local exploits ==================================================== gAlan 0.2.1 Universal Buffer Overflow Exploit meta ==================================================== Title: gAlan 0.2.1 Universal Buffer Overflow Exploit meta CVE-ID: OSVDB-ID: Author:...

VMWare Virtual 8086 Linux Local Ring0 Exploit

No description provided by source. EDB-ID: 10207 CVE-ID: CVE-2009-2267 Title: VMWare Virtual 8086 Linux Local Ring0 Exploit Author: Tavis Ormandy and Julien Tinnes Published: 2009-10-27 Download N/A Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM...

Linux Kernel collect_rx_frame函数本地权限提升漏洞

BUGTRAQ ID: 37036 CVE ID: CVE-2009-4005 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/isdn/hisax/hfcusb.c文件中的collectrxframe函数存在错误，通过ISDN到达的特制HDLC报文可能触发读缓冲区溢出，导致执行任意内核态代码。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Microsoft Windows License Logging服务远程堆溢出漏洞（MS09-064）

BUGTRAQ ID: 36921 CVE ID: CVE-2009-2523 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的License Logging服务（llssrv.exe）处理RPC调用的方式堆溢出漏洞。在处理传送给LlsrLicenseRequestW方式的参数时，字符数组应包含有终止的空字符。如果用户发送了没有空字符的恶意请求数据，就可以覆盖对lstrcatW的调用，触发这个溢出。 利用这个漏洞无需认证。攻击者可以通过向运行License...

SuSE9 Security Update : perl-Net-Server (YOU Patch Number 10270)

A format string problem was found in the logging routines of the perl-Net-Server perl module collection. This could lead to a remote attacker being able to crash a server using the perl-Net-Server module. This is tracked by the Mitre CVE ID CVE-2005-1127. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

FortiGuard Advisory: Microsoft Office Web Components Remote Memory Corruption Vulnerability

Microsoft Office Web Components Remote Memory Corruption Vulnerability 2009.July.13 Fortinet's FortiGuard Global Security Research Team Discovers Memory Corruption Vulnerability in Microsoft Office Web Components. Summary: ======== A memory corruption vulnerability exists in the ActiveX Controls ...

Mozilla Firefox和SeaMonkey JavaScript Chrome特权提升漏洞

Bugraq ID: 35373 CVE ID：CVE-2009-1841 CNCVE ID：CNCVE-20091841 Mozilla Firefox是一款开放源代码的WEB浏览器。SeaMonkey一款开放源代码的新闻组客户端。 Mozilla安全研究员mozbugra4报告存在安全漏洞，允许页面内容的脚本以提升特权运行。使用这个漏洞，攻击者可以导致chrome特权对象，如浏览器边栏或FeedWriter与WEB内容交互，使攻击者控制的代码以对象的chrome特权运行。 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04...

FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability

Apple Safari Remote Memory Corruption Vulnerability 2009.June.09 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple Safari. Summary: ======== A memory corruption vulnerability exists in Apple Safari which allows a remote attacker to execute arbitrary code through...

Adobe Flash Media Server未明RPC调用特权提升漏洞

Bugraq ID: 34790 CVE ID：CVE-2009-1365 CNCVE ID：CNCVE-20091365 Adobe Flash Media Server是一款流视频和实时通信领域的解决方案，可提供网上视频直播服务。 Adobe Flash Media Server存在一个未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Adobe Flash Media Streaming Server 3.5.1 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 3.0.3...

Microsoft Office Excel Remote Memory Corruption Vulnerability

Microsoft Office Excel Remote Memory Corruption Vulnerability 2009.April.14 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Microsoft Office Excel. Summary: ======== A memory corruption vulnerability exists in Microsoft Office Excel which allows a remote attacker to...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1

Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Cisco IOS SSL会话终止远程拒绝服务漏洞

BUGTRAQ ID: 31365 CVE ID: CVE-2008-3798 CNCVE ID：CNCVE-20083798 Cisco IOS是一款流行的网络操作系统。 Cisco IOS在处理SSL会话终止时存在问题，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 此漏洞不需要合法的信任凭证，如用户名，密码或证书，SSL协议使用TCP作为传输协议，所以需要三次TCP握手完成后来进行此攻击，可减低漏洞的危险性。通过伪造的IP地址可利用此漏洞。 运行基于SSL服务的Cisco IOS软件在进行SSL会话终止时导致服务崩溃。 此漏洞的Cisco bug ID为CSCsj85065，CVE...

Cisco IOS MPLS转发架构远程拒绝服务漏洞

BUGTRAQ ID: 31360 CVE ID: CVE-2008-3804 CNCVE ID：CNCVE-20083804 Cisco IOS是一款流行的网络操作系统。 新版本的Cisco IOS软件中，一种新的报文转发架构提高了可量测性和性能，MFI转发架构针对用户透明。MFI管理用于转发的MPLS数据结构，并用于替代老的LFIB实现。Cisco IOS MFI实现处理特殊构建的报文时存在漏洞，可导致拒绝服务攻击。...

Ingres用户认证非授权访问漏洞

BUGTRAQ ID: 26959 CVECAN ID: CVE-2007-6334 Ingres是很多CA产品默认所使用的数据库后端。 Windows平台上的Ingres数据库为之后连接的用户分配了与第一个连接用户相同的权限和身份，这允许远程攻击者获得非授权访问。仅在运行于Microsoft IIS Web服务器上且启用了集成Windows认证（IWA）选项的情况下才会出现这个漏洞。 Ingres Corporation Ingres Database 2.6 Ingres Corporation Ingres Database 2.5 厂商补丁： Ingres Corporation...

Cisco防火墙服务模块中应用程序检测拒绝服务漏洞

BUGTRAQ ID: 26941 CVE ID：CVE-2007-5584 CNCVE ID:CNCVE-20075584 Cisco Firewall Services Module FWSM是一款思科公司提供的防火墙服务模块，集成在Cisco Catalyst 6500交换机和Cisco 7600系列路由器上。 Cisco Firewall Services Module FWSM包含的第7层应用程序检测处理上存在问题，远程攻击者可以利用漏洞使FWSM模块重载，造成拒绝服务攻击。...

SuSE 10 Security Update : mozilla-nss,mozilla-nss-devel (ZYPP Patch Number 2067)

A security problem in the SSL handling of the NSS libraries was found : If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This bug is tracked by the Mitre CVE ...

SuSE 10 Security Update : gpg (ZYPP Patch Number 2994)

When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 1834)

It is possible to crash denial of service the GNU Privacy Guard gpg by supplying a specifically crafted message specifying a very large UID, which leads to an out of memory situation or an integer overflow. It is unclear if this problem can be exploited to execute code. This issue is tracked by t...

openSUSE 10 Security Update : asterisk (asterisk-1676)

A security problem was fixed in the IAX2 channel driver of Asterisk that could be used by remote users to execute code or at least crash Asterisk. This issue is tracked by the Mitre CVE ID CVE-2006-2898. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...