Red Hat Linux Kernel qla2xxx驱动完全可写文件漏洞

BUGTRAQ ID: 37876 CVE ID: CVE-2009-3556 Linux Kernel是开放源码操作系统Linux所使用的内核。 对于使用qla2xxx驱动且支持NPIV硬件的Red Hat版本的Linux Kernel系统，驱动向SCSI主机属性中添加了两个新的sysfs伪文件： w--w--w- root root /sys/class/scsihost/host1/vportcreate w--w--w- root root /sys/class/scsihost/host1/vportdelete w--w--w- root root...

CVE-2009-4488

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendo...

CVE-2009-4496

Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

CVE-2009-4495

Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

CVE-2009-3930

The connected records confirm CVE-2009-3930 affects the Christos Zoulas file parser prior to version 5.02. The issue is described as multiple integer overflows triggered while processing a malformed Compound File (CDF) document, which can lead to a buffer overflow. The impact is stated as unspeci...

PHP168 background check/modify any file vulnerability-vulnerability warning-the black bar safety net

Vulnerability information: Affect the program:PHP168 all take template edit version Author:esnra Released on:http://www.3hack.com Use Conditions:have permission to enter the background Using the method: Into the function centre,find the style/template settings,selected style management ! 文章 来自...

Buffer overflow

Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...

CVE-2009-3807

Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service crash via a long string in a .vib file...

BulletProof FTP 2.63 b56 Client Malformed '.bps' File Stack Buffer Overflow

No description provided by source. / BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200...

openSUSE Security Update : open-iscsi (open-iscsi-1238)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files CVE-2009-1297 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

PT-2009-5500 · Grapari · E-Gold Game Series Pirates Of The Caribbean

Name of the Vulnerable Software and Affected Versions: Pirates of The Caribbean in the E-Gold Game Series affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the x and y parameters in the "index.php" file. This enables attackers to...

Memory corruption

CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a file with a crafted resource fork...

CVE-2008-7185

GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service segmentation fault and crash via a playlist .pls file with a long Title field, possibly related to the ghashtablelookup function in b-playlist-manager.c...

CVE-2008-7185

GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service segmentation fault and crash via a playlist .pls file with a long Title field, possibly related to the ghashtablelookup function in b-playlist-manager.c...

rgmanager: multiple insecure temporary file use issues

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

KMPlayer '.srt'文件缓冲区溢出漏洞

Bugraq ID: 35745 CNCAN ID：CNCAN-2009072103 KMPlayer是一款流行的媒体播放程序。 KMPlayer处理'.srt'文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的'.srt'文件，诱使用户打开可触发此漏洞。 KMPlayer KMPlayer 2.9.4 .1433 KMPlayer KMPlayer 2.9.3.1210 目前没有解决方案提供： http://www.kmplayer.com/ !usr/bin/perl In The Name Of Allah The KMplayer .Srt Fil...

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

Fedora Core 10 FEDORA-2009-5368 (coccinelle)

The remote host is missing an update to coccinelle announced via advisory FEDORA-2009-5368. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...