PT-2013-1324

Name of the Vulnerable Software and Affected Versions Samba versions 3.2.x through 3.6.x before 3.6.20 Samba versions 4.0.x before 4.0.11 Samba versions 4.1.x before 4.1.1 Description The issue is related to a lack of privilege control and access management mechanisms in the vfs streams depot or...

[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

RedHat Security Advisory RHSA-2009:0009

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0009. These updated packages address the following security issues: Tavis Ormandy discovered a deficiency in the Linux kernel 32-bit and 64-bit emulation. This could allow a local, unprivileged user to prepare and ru...

CVE-2006-3070

writeok.php in Zeroboard 4.1 pl8, when installed on Apache with modmime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe...

PHP-Board 1.0 - User Password Disclosure

PHP-Board 1.0 - User Password Disclosure source: https://www.securityfocus.com/bid/6862/info php-board user information is stored in flat files on the system hosting the software. Access to the files via the web is not sufficiently restricted. Remote attackers may request user files and gain acce...