IBM AIX Bellmail mail agent race conditions

Race conditions during temporary file creations...

CVE-2005-0893

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...

CVE-2005-0893

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...

TCP/IP implementations do not adequately validate ICMP error messages

Overview Multiple TCP/IP implementations do not adequately validate ICMP error messages. A remote attacker could cause TCP connections to drop or be degraded using spoofed ICMP error messages. Description A number of widely accepted Internet standards describe different aspects of the relationshi...

USN-110-1: Linux kernel vulnerabilities

Alexander Nyberg discovered an integer overflow in the sysfswritefile function. A local attacker could exploit this to crash the kernel or possibly even execute arbitrary code with root privileges by writing to an user-writable file in /sys under certain low-memory conditions. However, there are...

Linux kernel multiple vulnerabilities

sysfswritefile integer overflow, futex functions DoS, ext3 and jfs race conditions...

CVE-2005-0893

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...

RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit

/ | | // / / / / | | / | / | |/ //|| / / research / . | REXOTECdotCOM | |=------= ADV RX250305 - OpenMosixView : Multiple Race conditions ------=| | | |=--- - INFORMATION ---------------------------------------------------------------------| VulnDiscovery: 2004/12/21 Release Date : 2005/03/25...

advRX250305.txt

\ \ / | | // \ / / \ / / \ | | \ / | \ /\ \ | |/\ /\/|| \ / / research / . | REXOTECdotCOM | |=------= ADV RX250305 - OpenMosixView : Multiple Race conditions ------=| | | |=--- - INFORMATION ---------------------------------------------------------------------| VulnDiscovery: 2004/12/21...

iso9660handler.txt

Good morning, There appears to be a fair number of kernel-level range checking flaws in ISO9660 filesystem handler and Rock Ridge / Juliet extensions in Linux up to and including 2.6.11. These bugs range from DoS conditions to potentially exploitable memory corruption - all this whenever a...

Apple Mac OSX 10.3.x - Multiple Vulnerabilities

Apple Mac OSX 10.3.x - Multiple Vulnerabilities // source: https://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain...

vbulletin-3.0.4.txt

Exploit: ---------------- http://site/forumdisplay.php?GLOBALS=1&f=2&comma=".system'id'." Conditions: ---------------- 1st condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. 2nd condition : $bbuserinfo'userid' == 0 , you must be an...

Multiple Linux kernel security vulnerabilities

Arbitrary process memory control, race conditions, buffer overflow, DoS, IP filtering bypass...

[NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities

Vulnerable Systems: ---------------- vBulletin version 3.0 up to and including version 3.0.4 Immune systems: ---------------- vBulletin version 3.0.5 vBulletin version 3.0.6 Vulnerable code in forumdisplay.php : if $vboptions'showforumusers' . . . . if $bbuserinfo'userid' . . . . $comma = ', ';...

vBulletin <= 3.0.4 ""forumdisplay.php"" Code Execution (part 2)

No description provided by source. ?php / vbulletin 3.0.x execute command by AL3NDALEEB al3ndaleebatuk2.net First condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. Second condition: $bbuserinfo'userid' == 0 , you must be an visitor/guest...

vbulletin 3.0.x PHP code execution

Vulnerable Systems: ---------------- vBulletin version 3.0 up to and including version 3.0.4 Immune systems: ---------------- vBulletin version 3.0.5 vBulletin version 3.0.6 Vulnerable code in forumdisplay.php : if $vboptions'showforumusers' . . . . if $bbuserinfo'userid' . . . . $comma = ', ';...

GLSA-200501-38 : Perl: rmtree and DBI tmpfile vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-38 Perl: rmtree and DBI tmpfile vulnerabilities Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way CAN-2005-0077. Paul Szabo found out that...

vBulletin <= 3.0.4 "forumdisplay.php" Code Execution

Exploit for unknown platform in category web applications ==================================================== vBulletin fetcharray$forumusers == True , when you visit the forums, it must has at least one user show the forum. 4th condition : magicquotesgpc must be OFF SPECIAL condition : you must...

vBulletin 3.0.4 - forumdisplay.php Code Execution (1)

vBulletin 3.0.4 - forumdisplay.php Code Execution 1 Exploit: ---------------- http://site/forumdisplay.php?GLOBALS=1&f=2&comma=".system'id'." Conditions: ---------------- 1st condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. 2nd condition ...

vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (1)

Exploit: ---------------- http://site/forumdisplay.php?GLOBALS=1&f=2&comma=".system'id'." Conditions: ---------------- 1st condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. 2nd condition : $bbuserinfo'userid' == 0 , you must be an...