Ubuntu 4.10 / 5.04 / 5.10 : mozilla-firefox, firefox vulnerabilities (USN-271-1)

Web pages with extremely long titles caused subsequent launches of Firefox browser to hang for up to a few minutes, or caused Firefox to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...

Cross site scripting

Cross-site scripting XSS vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI $SERVER'REQUESTURI'...

DEBIAN-CVE-2006-1796

Cross-site scripting XSS vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI $SERVER'REQUESTURI'...

CVE-2006-1796

WordPress 1.5.2 (and possibly earlier than 2.0.1) is affected by an XSS in the paging links (template-functions-links.php). The vulnerability allows remote attackers to inject arbitrary script/HTML into IE users via the request URI ($_SERVER['REQUEST_URI']). Impact is cross-site scripting with pa...

CVE-2006-1735

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding XBL.method.eval to create Javascript functions that are compiled with extra...

Design/Logic Flaw

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding XBL.method.eval to create Javascript functions that are compiled with extra...

[SECURITY] [DSA 1030-1] New moodle packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1030-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2006 http://www.debian.org/security/faq -...

PHPNuke-Clan 3.0.1 - 'vwar_root2' Remote File Inclusion

!/usr/bin/perl PHPNuke-Clan 3.0.1 Remote File Inclusion Exploit Bug Found By uid0 code by zod c 2006 ExploiterCode.com usage: perl pnc.pl perl pnc.pl http://site.com/PNC/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: nex, kutmaster, spic, cijfer ;P, ReZeN,...

CVE-2006-1342

net/ipv4/afinet.c in Linux kernel 2.4 does not clear sockaddrin.sinzero before returning IPv4 socket names from the 1 getsockname, 2 getpeername, and 3 accept functions, which allows local users to obtain portions of potentially sensitive memory...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-263-1)

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

CVE-2006-0963

Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via 1 long locale environment variables to a strcpy function call in clocaleglibc2.c and 2 long arguments to unspecified functions in numputfloat.cpp...

mb_send_mail() PHP safe mode protection bypass

mbsendmail and imap unfctions allow to access system files...

PHP 4.x/5.0/5.1 - 'mb_send_mail()' Restriction Bypass

source: https://www.securityfocus.com/bid/16878/info PHP is prone to multiple input-validation vulnerabilities that could allow 'safemode' and 'openbasedir' security settings to be bypassed. These issues reside in the 'mbsendmail' function, the 'mail' function, and various PHP IMAP functions...

MySQL 4.x5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2)

MySQL 4.x5.0 Linux - User-Defined Function UDF Dynamic Library 2 / $Id: raptorudf2.c,v 1.1 2006/01/18 17:58:54 raptor Exp $ raptorudf2.c - dynamic library for dosystem MySQL UDF Copyright c 2006 Marco Ivaldi This is an helper dynamic library for local privilege escalation through MySQL run with...

CVE-2006-0648

Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbitrary files via the 1 getdate and possibly other parameters used in the replacefiles function in search.php and 2 $file variable as used in the parse function in...

Update Protection against A Format String Vulnerability in mod_auth_pgsql for Apache

A vulnerability exists in multiple versions of an authentication module modauthpgsql for Apache httpd. To exploit this vulnerability, a user can supply specially crafted information to trigger a flaw in certain logging functions of the module. Successful exploitation could result in the execution...

[SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 954-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 25th, 2006 http://www.debian.org/security/faq -...

MySQL 4.x - CREATE Temporary TABLE Symlink Privilege Escalation

// source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary file-creation vulnerability. Reports indicate that an attacker...

MS Windows Metafile (WMF) Remote File Download Exploit Generator

Exploit for unknown platform in category remote exploits ================================================================ MS Windows Metafile WMF Remote File Download Exploit Generator ================================================================ / \ / WMF nDay download Exploit Generator \ by...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-38-1)

CAN-2004-0814 : Vitaly V. Bursov discovered a Denial of Service vulnerability in the 'serio' code; opening the same tty device twice and doing some particular operations on it caused a kernel panic and/or a system lockup. Fixing this vulnerability required a change in the Application Binary...