CVE-2006-6487

CVE-2006-6487: XSS in dt_guestbook 1.0f (index.php) when PHP register_globals is On. The vulnerability allows remote attackers to inject arbitrary script via the error[] parameter, enabling a reflected XSS in the victim’s browser. Affected product: dt_guestbook 1.0f; attack requires On register_g...

CVE-2006-6487: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in DT Guestbook dtguestbook 1.0f, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the error parameter...

AIX 4.2 /usr/dt/bin/dtterm Local Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include string.h char prog100="/usr/dt/bin/dtterm"; char prog230="dtterm"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;;...

[Fwd: Failed mail]

Well I tried to mail this to the SCO / Caldera security aliases but they keep bouncing back so I will send it here instead... this is regarding the recent DT overflows on OpenUnix8. -KF -------- Original Message -------- Subject: Failed mail Date: Mon, 1 Oct 2001 17:08:31 PDT From: MMDF Mail Syst...