gAlan 0.2.1 Buffer Overflow

This module exploits a stack buffer overflow in gAlan 0.2.1 by creating a specially crafted galan file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'gAlan 0.2.1 Buffer Overflow', 'Descriptio...

gAlan 0.2.1 - Universal Buffer Overflow (Metasploit)

gAlan 0.2.1 - Universal Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'gAlan 0.2.1 Buffer Overflow Exploit', 'Description' = %q This module exploits a stack overflow in gAlan 0.2.1 By creating a specially crafted galan file, an an attacker may be able to execute arbitrary code. ...

gAlan 0.2.1 Universal Buffer Overflow Exploit (meta)

Exploit for unknown platform in category local exploits ==================================================== gAlan 0.2.1 Universal Buffer Overflow Exploit meta ==================================================== Title: gAlan 0.2.1 Universal Buffer Overflow Exploit meta CVE-ID: OSVDB-ID: Author:...

gAlan (.galan file) Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== gAlan .galan file Universal Buffer Overflow Exploit ===================================================== Title: gAlan .galan file Universal Buffer Overflow Exploit CVE-ID: OSVDB-ID:...

gAlan 0.2.1 - Universal Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'gAlan 0.2.1 Buffer Overflow Exploit', 'Description' = %q This module exploits a stack overflow in gAlan 0.2.1 By creating a specially crafted galan file, an an attacker may be able to execute arbitrary code. , 'License' = MSFLICENSE, 'Author' = 'loneferret,...

CVE-2009-3605

Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF file, related to 1 glib/poppler-page.cc; 2 ArthurOutputDev.cc, 3 CairoOutputDev.cc, 4 GfxState.cc, 5 JBIG2Stream.cc, ...

CVE-2009-3605

CVE-2009-3605 is a Poppler vulnerability affecting Poppler 0.10.5 and earlier, described as multiple integer overflows that can be triggered by a crafted PDF. The advisory details indicate affected components within Poppler (glib/poppler-page.cc; ArthurOutputDev.cc; CairoOutputDev.cc; GfxState.cc...

CVE-2009-3607

Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of the...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for dbus

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dbus-1 dbus-1-devel dbus-1-glib dbus-1-gtk dbus-1-java dbus-1-mono dbus-1-python dbus-1-qt3 dbus-1-qt3-devel dbus-1-x11 More details may also be found by...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for NetworkManager

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-devel NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked i...

SLES11: Security update for NetworkManager

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

USN-841-1: GLib vulnerability

Arand Nash discovered that applications linked to GLib e.g. Nautilus did not correctly copy symlinks. If a user copied symlinks with GLib, the symlink target files would become world-writable, allowing local attackers to gain access to potentially sensitive information...

glib library privilege escalation

gfilecopy function sets symbolic link's permission if source file is copied by symbolic link...

GNOME glib库g_file_copy函数不安全文件权限设置漏洞

CVE ID: CVE-2009-3289 GLib是GTK+和GNOME工程的基础底层核心程序库，是一个综合用途的轻量级的C程序库。 glib库gfilecopy函数将目标文件的权限设置为了符号链接的权限（777），这允许本地用户修改其他用户的文件。 GNOME glib 2.0 厂商补丁： GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.gnome.org/...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

Directory traversal

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...