Integer overflow

Integer overflow in OmniWeb allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25...

CVE-2010-1101

Integer overflow in Alexander Clauss iCab allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25...

CVE-2010-1099

CVE-2010-1099 : Apple Safari is affected by an integer overflow that allows remote attackers to bypass outbound TCP port restrictions by using a port number outside the unsigned short range (e.g., 65561 for port 25). Root cause: integer truncation/overflow in port handling. Impact: bypass of non-...

CVE-2010-1101

The CVE-2010-1101 entry concerns the iCab browser by Alexander Clauss. The vulnerability is an integer overflow in the handling of TCP port numbers, allowing remote attackers to bypass outbound port restrictions by using a port value outside the range of an unsigned short (demonstrated with 65561...

CVE-2010-1102

Integer overflow in OmniWeb allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25...

CVE-2010-1103

Integer overflow in Stainless allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25...

CVE-2010-1100

The CVE-2010-1100 entry concerns the web browser Arora. The issue is an integer overflow in Arora that lets remote attackers bypass intended port restrictions for outbound TCP connections, demonstrated with a port value of 65561 on port 25. The available sources corroborate the vulnerability in A...

CVE-2010-1102

The CVE-2010-1102 entry concerns OmniWeb. The root cause is an integer overflow in outbound TCP port handling, allowing remote attackers to bypass port restrictions by using an out-of-range port (e.g., 65561 for TCP port 25). Documented impact is bypass of intended port restrictions; no explicit ...

CVE-2010-1103

The CVE-2010-1103 entry concerns the Stainless component and describes an integer overflow that lets remote attackers bypass outbound TCP port restrictions. specifically, a port value outside the unsigned short range (demonstrated with 65561 for TCP port 25) can slip past restrictions. This is th...

Family Connections 2.2 SQL Injection

Exploit Title: Family Connections version 2.2 SQL Injection Date: March 15, 2010 Author: Blake Software Link: http://sourceforge.net/projects/fam-connections/files/Family%20Connections/2.2/FCMS2.2.zip/download Version: version 2.2 Tested on: Windows XP SP3 Multiple SQL Injection vulnerabilities a...

Lenovo Hotkey Driver <= v5.33 Privilege Escalation

No description provided by source. Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability Privilege escalation in Lenovo Hotkey Driver and Access Connections version...

Lenovo Hotkey Driver 5.33 - Local Privilege Escalation

Lenovo Hotkey Driver 5.33 - Local Privilege Escalation Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo Hotkey Driver and Access Connections version...

Lenovo Privilege Escalation

Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo™ Hotkey™ Driver and Access Connections™ version =v5.33 Impact: A privilege escalation attack can be...

JBoss JMX Console Deployer Upload and Execute

$Id: jbossmaindeployer.rb 8575 2010-02-21 01:44:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-0643

Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a prox...

CVE-2010-0643

Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a prox...

CVE-2010-0643

Removed by vendor...

[SECURITY] Fedora 12 Update: chrony-1.23-8.20081106gitbe42b4.fc12

A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with dial-up Internet connections, and also supports computers in permanently connected environments...

[SECURITY] Fedora 11 Update: chrony-1.23-6.20081106gitbe42b4.fc11

A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with dial-up Internet connections, and also supports computers in permanently connected environments...

Security Best Practice: Aggressive Aging

Aggressive Aging helps manage the connections table capacity and memory consumption of the firewall to increase durability and stability. Aggressive Aging allows the gateway machine to handle large amounts of unexpected traffic, especially during a Denial of Service attack. A denial of service...