FreeBSD Security Advisory (FreeBSD-SA-05:20.cvsbug.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:20.cvsbug.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

RedHat linux DoS through audit subsystem

Replcaing of watched file causes system crash...

Win 2 0 0 0/XP system invincible to replace command-and-vulnerability warning-the black bar safety net

Used to replace file replace, even being used of the file can also be replaced. Very invincible. For example:in C:\create a directory, c:\aaa Then copy an mp3 to c:\aaa and named to the c:\aaa\a. mp3 Then copy another song to C:\a. mp3 Then use media player to play the c:\aaa\a. mp3 In the comman...

Microsoft Windows - Improper Token Validation Privilege Escalation

/ Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLine; int mainint argc, char argv HANDLE hToken,hThread; HMODULE hMsi ...

ICQLite executable trojaning

bugtraq@, Title: ICQ Lite executable trojaning Affected: ICQLite 2003a Vendor: ICQ Inc Vendor URL: http://www.icq.com Risk: Average Exploitable: Yes Remote: No Date: May, 29 2003 Advisory URL: http://www.security.nnov.ru/advisories/icqlite.asp I. Intro: ICQ Lite is popular internet messenger...

SAP Database 7.37.4 - SDBINST Race Condition

SAP Database 7.37.4 - SDBINST Race Condition source: https://www.securityfocus.com/bid/7421/info SAP Database SDBINST has been reported prone to a race condition vulnerability. It has been reported that the SAP Database install tool SDBINST may perform operations non-atomically when installing th...

TFTPD32 2.50 - Arbitrary File DownloadUpload

TFTPD32 2.50 - Arbitrary File DownloadUpload source: https://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key...