RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay

source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters. A remote attacker may exploit this...

PHP memory corruption

Invalid exceptional conditions handling allows memory corruption leading to code execution...

Multiple browsers security dialogs race conditions

By forcing user to type predictable characters, key sequences or mouse clicks it's possible to conduct situation user event will be received by shortly appeared security dialog for example "Save file" dialog can apper then user is about to press Y key...

[Full-Disclosure] Race conditions in security dialogs

I discovered arbitrary code execution holes in Mozilla, Internet Explorer, and Opera that involve human reaction time. One version of the attack works like this: the page contains a captcha displaying the word "only" and asks you to type the word to verify that you are a human. As soon as you typ...

FreeBSD : neon format string vulnerabilities (127)

The following package needs to be updated: neon %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg842378958f3911d88b290020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

CVE-2003-0956

Multiple race conditions in the handling of ODIRECT in Linux kernel prior to version 2.4.22 could cause stale data to be returned from the disk when handling sparse files, or cause incorrect data to be returned when a file is truncated as it is being read, which might allow local users to obtain...

CVE-2003-1288

Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service kernel oops via unknown attack vectors related to the 1 sinfo and 2 ipinfo data structures and the a forgetoriginalparent, b goodness, c schedule, d updateprocesstimes, a...

[SECURITY] [DSA-388-1] New kdebase packages fix multiple vulnerabilites in KDM

-------------------------------------------------------------------------- Debian Security Advisory DSA 388-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 19th, 2003 http://www.debian.org/security/faq -...

sane-backends multiple bugs

Multiple DoS conditions...

Novell Netware Enterprise Web Server 5.1/6.0 - 'CGI2Perl.NLM' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8251/info Novell Netware Enterprise Web Server cgi2perl.nlm has been reported prone to a buffer overflow vulnerability. The issue presents itself, likely due to insufficient bounds checking performed on user-supplied data. It has been reported that a remo...

Important: Red Hat Security Advisory: : : : Updated OpenSSL packages fix vulnerabilities

Updated OpenSSL packages that fix potential timing-based and modified Bleichenbacher attacks are available for Red Hat Linux on IBM iSeries and pSeries systems. OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer...

CVE-2002-1563

Summary: CVE-2002-1563 affects stunnel 4.0.3 and earlier and is due to unsafe handling of SIGCHLD in the child process/daemon path, allowing a race that can crash the process and cause a denial of service. The issue is documented across multiple feeds (NVD entry and OSV/CVE mirrors) with Red Hat ...

CVE-2002-1563

stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...

CVE-2002-1563

stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...

[SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions

-------------------------------------------------------------------------- Debian Security Advisory DSA 292-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2003 http://www.debian.org/security/faq -...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

Multiple bugs in Samba

Buffer overflow on SMB/CIFS packet re-assembly, chown race conditions...

DSA-232 cupsys - several vulnerabilities

Bulletin has no description...

CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...