4421 matches found
Fedora 13 : patch-2.6.1-8.fc13 (2011-1269)
Applied fix so that malicious patches cannot create files above the current directory CVE-2010-4651. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
BlackHole RAT : Mac OS X backdoor Trojan !
'BlackHole' is the latest remote administration tool RAT and is available both in Windows and Mac. Hacktool such RAT employs client-server program that communicates to its victim's machine through its trojan server. The server application is installed on the victim while the client application is...
KMPlayer Skins 2.9.3.1 Buffer Overflow
!/usr/bin/perl Title : KMPlayer 'Skins' V$file"; print F $Buf; sleep 2; print "\n + Creat File : $file , Succesfully ! \n"; close F; ================ Exploited By KedAns-Dz HST-Dz ========================= GreetZ to : Islampard Dr.Ride Zaki.Eng BadR0 NoRo FouinY Red1One XoreR Mr.Dak0...
PT-2011-2307
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly...
CVE-2011-0385: Undefined Security Weakness
The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary cod...
Cisco Security Agent Management Console st_upload File Creation
The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC...
CVE-2011-0364: Improper Control of Generation of Code
The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request...
Microsoft Windows - Print Spooler Service Impersonation (MS10-061) (Metasploit)
$Id: ms10061spoolss.rb 11766 2011-02-17 19:22:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...
Low: Red Hat Security Advisory: bash security and bug fix update
Updated bash packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
PT-2011-2293
Name of the Vulnerable Software and Affected Versions Cisco Security Agent versions 5.1 through 6.0 before 6.0.2.145 Cisco Security Agent version 6.0 before 6.0.2.145 Description The issue allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a...
Cisco Security Agent Management st_upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Security Agent Management Console. Authentication is not required to exploit this vulnerability. The flaw exists within the webagent.exe component which is handed requests by an Apache instan...
PT-2011-2822
Name of the Vulnerable Software and Affected Versions feh versions 1.11.2 and earlier Description The issue is related to the feh unique filename function in utils.c, which might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file. Recommendations For feh...
CVE-2011-1031: Improper Link Resolution Before File Access
The fehuniquefilename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file, a different vulnerability than CVE-2011-0702...
Opera Web Browser 11.00 - Integer Overflow
Opera Web Browser 11.00 - Integer Overflow +Exploit Title: Exploit Integer Overflow Opera Web Browser 11.00 +Date: 24\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://get12.opera.com/pub/opera/win/1100/int/Opera1100intSetup.exe +Version: 11.00 +Tested On: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE:...
Oracle Beehive voice-servlet Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Beehive. Authentication is not required to exploit this vulnerability. The specific flaw exists within 'voice-servlet/prompt-qa/Index.jspf'. During the creation of a file used for storing an...
CVE-2010-4695: Improper Restriction of Operations within the Bounds of a Memory Buffer
A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...
PCSX2 0.9.7 beta Binary Denial of Service Vulnerability
Exploit for windows platform in category dos / poc ======================================================= PCSX2 0.9.7 beta Binary Denial of Service Vulnerability ======================================================= Exploit Title: PCSX2 v0.9.7 Crash Date: 08/11/2010 Author: 41.w4r10r Version:...
kernel security update
2.6.18-194.17.4.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug...
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
This module attempts to gain root privileges on Linux systems by abusing a vulnerability in the GNU C Library glibc dynamic linker. glibc ld.so in versions before 2.11.3, and 2.12.x before 2.12.2 does not properly restrict use of the LDAUDIT environment variable when loading setuid executables...