50 matches found
Logsurfer: Arbitrary code execution
Background Logsurfer is a real time log monitoring and analysis tool. Description Logsurfer log files may contain substrings used for executing external commands. The prepareexec function in src/exec.c contains a double-free vulnerability. Impact A remote attacker could inject specially-crafted...
FreeBSD : URI handler vulnerabilities in several browsers (df333ede-a8ce-11d8-9c6d-0020ed76ef5a)
Karol Wiesek and Greg MacManus reported via iDEFENSE that the Opera web browser contains a flaw in the handling of certain URIs. When presented with these URIs, Opera would invoke external commands to process them after some validation. However, if the hostname component of a URI begins with a -'...
CVE-2008-6373
CVE-2008-6373 affects Nagios core prior to 3.0.6. The vulnerability is described as unspecified, with remote attack vectors tied to CGI programs, “adaptive external commands,” and the ability to write newlines and submit service comments. Public sources in connected documents confirm affected pro...
Debian DSA-1668-1 : hf - programming error
Steve Kemp discovered that hf, an amateur-radio protocol suite using a soundcard as a modem, insecurely tried to execute an external command which could lead to the elevation of privileges for local users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
Fedora 7 : comix-3.6.4-6.fc7 (2008-2993)
Several security flaws are reported against comix 3.6.4. One issue is that comix uses os.popen to execute external commands without handling filenames properly. This may allow malicios users to execute arbitrary commands by opening some files with crafted names. This issue is now identified as...
Hacking tutorials series of micro-PHP Trojan explore-exploit warning-the black bar safety net
This article is nothing special, only required to initiate it. And gave and I did the dishes in PHP the door and wandering friend. Just learning PHP in a few days, I would rush to work, so there are errors and inadequacies Please a positive note. PHP syntax powerful is ASP in the dust, only one:...
URI handler vulnerabilities in several browsers
Karol Wiesek and Greg MacManus reported via iDEFENSE that the Opera web browser contains a flaw in the handling of certain URIs. When presented with these URIs, Opera would invoke external commands to process them after some validation. However, if the hostname component of a URI begins with a -'...
Caldera X Server 7.18.0 - External Program Privileged Invocation
Caldera X Server 7.18.0 - External Program Privileged Invocation source: https://www.securityfocus.com/bid/5575/info Caldera's X Server implementation invokes external commands without dropping existing privilege levels. Xserver calls xkbcomp, and other related utilities, in an unsecure manner...
