4385 matches found
Flash drive/CD autoplay command execution
Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...
Flash drive/CD autoplay command execution
Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...
Pwn2Own trifecta: Hacker exploits IE8, Firefox, Safari
All three major Web browsers — Microsoft’s Internet Explorer 8, Mozilla Firefox and Apple’s Safari — failed to survive the hacker onslaught at this year’s CanSecWest Pwn2Own contest. A security researcher named “Nils” he declined to provide his full name performed a clean drive-by download attack...
kernel: enforce a minimum SG_IO timeout
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...
Code injection
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
CVE-2009-0243
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
CVE-2009-0243
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
CVE-2009-0243
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
PT-2009-2915 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue allows attackers to execute arbitrary code through various means, including inserting CD-ROM or DVD media, connecting a USB or Firewire device, mapping a network drive, ...
CVE-2009-0243: Undefined Security Weakness
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability
Overview The HDL-F series products from I-O DATA DEVICE, INC. are LAN connectable hard disk drives. The web interface for administration in the products contains a cross-site request forgery vulnerability. The HDL-F series products provided by I-O DATA DEVICE, INC. are LAN connectable hard disk...
On Tumblr hung it to the principle-vulnerability warning-the black bar safety net
Today I come to tell you to talk about it on the QQ space hung it works, I tried it, the success rate account for 8 0 percent. There are a lot of people have asked me what can be done in broiler flocks, I think for a long time, but the QQ space to hang horse can achieve this. So I try to do it,...
Trac quickjump Search Script q Parameter Arbitrary Site Redirect
The remote host is running Trac, an enhanced wiki and issue tracking system for software development projects. The version of Trac installed on the remote host fails to sanitize user input to the 'q' parameter of the 'search' script before using it in an unfiltered and unmanaged fashion in a...
qemu/kvm/xen: qemu block format auto-detection vulnerability
The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...
DEBIAN-CVE-2008-2004
The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...
Default credentials
HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...
CVE-2008-0708
HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...
CVE-2008-0708
CVE-2008-0708 relates to HP USB 2.0 Floppy Drive Key options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers, where worms W32.Fakerecy and W32.SillyFDC may be launched if the server lacks up-to-date detection. The connected documents confirm the affected products and the malware...
CVE-2008-0708
HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...
CVE-2008-0708: Undefined Security Weakness
HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...