8483 matches found
EPSON Status Monitor 3 Local Privilege Escalation Vulnerability
Exploit for unknown platform in category local exploits =============================================================== EPSON Status Monitor 3 Local Privilege Escalation Vulnerability =============================================================== ------- EPSON Status Monitor 3 local privilege...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-125)
This update brings Mozilla Firefox to version 3.0.1. It fixes various bugs and also following security problems : MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerabili...
openSUSE Security Update : libopensc2 (libopensc2-186)
This update fixes a security issues with opensc that occured when initializing blank smart cards with Siemens CardOS M4. After the initialization anyone could set the PIN of the smart card without authorization CVE-2008-2235. NOTE: Already initialized cards are still vulnerable after this update...
Sql injection
Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via 1 the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or 2 the command-line client, as demonstrated by a certain trcli -r command...
TekRADIUS Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nth Dimension Security Advisory NDSA20090412 Date: 12th April 2009 Author: Tim Brown URL: / Product: TekRADIUS 3.0 Vendor: Yasin KAPLAN Risk: Medium Summary This advisory comes in 3 related parts: 1 By default, TekRADIUS connects to SQL Server as the ...
Authentication Bypas in BASE version 1.2.4 and prior
Versions prior to 1.2.4 are affected. The issue was fixed in version 1.2.5. The authentication process checks the cookies to see if the user has a given role. The user and role defined in the cookie is not validated during this process. An attacker can add a cookie shown below in order to bypass...
[SECURITY] Fedora 11 Update: pcsc-lite-1.5.2-2.fc11
The purpose of PC/SC Lite is to provide a WindowsR SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under WindowsR. This package includes the PC/SC Lite daemon, a resource manager that coordinates communications...
Fedora Core 10 FEDORA-2009-5382 (wireshark)
The remote host is missing an update to wireshark announced via advisory FEDORA-2009-5382. OpenVAS Vulnerability Test $Id: fcore20095382.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5382 wireshark Authors: Thomas Reinke Copyright: Copyright c 200...
DEBIAN-CVE-2009-1756
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie mcookie on the command line when invoking xauth from 1 app.cpp and 2 switchuser.cpp, which allows local users to access the X session by listing the process and its arguments...
CVE-2009-1756
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie mcookie on the command line when invoking xauth from 1 app.cpp and 2 switchuser.cpp, which allows local users to access the X session by listing the process and its arguments...
[SECURITY] Fedora 10 Update: wireshark-1.0.7-1.fc10
Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...
Harland Scripts 11 Products Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Harland Scripts 11 Products Remote Command Execution Exploit ============================================================ "cli" die"WTF, Run Me F...
CVE-2009-1573
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie MCOOKIE on the command line, which allows local users to gain privileges by listing the process and its arguments...
Solaris 5.8 (sparc) : 137182-12
Service Provisioning System 6.0: Command Line User Interface Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Solaris 5.10 (x86) : 137183-12
Service Provisioning System 6.0x86: Command Line User Interface P. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Solaris 5.10 (sparc) : 137182-12
Service Provisioning System 6.0: Command Line User Interface Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
MDVA-2009:014 : drak3d
This update fixes several minor issues with drak3: - allow to show only installed WMs in interactive mode for finish-install - add --force option to force 3D desktop enabling even if not supported - check if system supports command line options before applying them - blacklist geode driver - do n...
FreeBSD : a2ps -- insecure command line argument handling (8091fcea-f35e-11d8-81b0-000347a4fa7d)
Rudolf Polzer reports : a2ps builds a command line for file containing an unescaped version of the file name, thus might call external programs described by the file name. Running a cronjob over a public writable directory a2ps-ing all files in it - or simply typing 'a2ps .txt' in /tmp - is...
Default credentials
UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process...
