gAlan (.galan file) Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== gAlan .galan file Universal Buffer Overflow Exploit ===================================================== Title: gAlan .galan file Universal Buffer Overflow Exploit CVE-ID: OSVDB-ID:...

gAlan 0.2.1 Universal Buffer Overflow Exploit (meta)

Exploit for unknown platform in category local exploits ==================================================== gAlan 0.2.1 Universal Buffer Overflow Exploit meta ==================================================== Title: gAlan 0.2.1 Universal Buffer Overflow Exploit meta CVE-ID: OSVDB-ID: Author:...

gAlan 0.2.1 - Universal Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'gAlan 0.2.1 Buffer Overflow Exploit', 'Description' = %q This module exploits a stack overflow in gAlan 0.2.1 By creating a specially crafted galan file, an an attacker may be able to execute arbitrary code. , 'License' = MSFLICENSE, 'Author' = 'loneferret,...

gAlan 0.2.1 - Universal Buffer Overflow (Metasploit)

gAlan 0.2.1 - Universal Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'gAlan 0.2.1 Buffer Overflow Exploit', 'Description' = %q This module exploits a stack overflow in gAlan 0.2.1 By creating a specially crafted galan file, an an attacker may be able to execute arbitrary code. ...

CVE-2009-3605

Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF file, related to 1 glib/poppler-page.cc; 2 ArthurOutputDev.cc, 3 CairoOutputDev.cc, 4 GfxState.cc, 5 JBIG2Stream.cc, ...

CVE-2009-3605

CVE-2009-3605 is a Poppler vulnerability affecting Poppler 0.10.5 and earlier, described as multiple integer overflows that can be triggered by a crafted PDF. The advisory details indicate affected components within Poppler (glib/poppler-page.cc; ArthurOutputDev.cc; CairoOutputDev.cc; GfxState.cc...

CVE-2009-3607

Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of the...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for dbus

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dbus-1 dbus-1-devel dbus-1-glib dbus-1-gtk dbus-1-java dbus-1-mono dbus-1-python dbus-1-qt3 dbus-1-qt3-devel dbus-1-x11 More details may also be found by...

SLES10: Security update for NetworkManager

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-devel NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked i...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES11: Security update for NetworkManager

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

USN-841-1: GLib vulnerability

Arand Nash discovered that applications linked to GLib e.g. Nautilus did not correctly copy symlinks. If a user copied symlinks with GLib, the symlink target files would become world-writable, allowing local attackers to gain access to potentially sensitive information...

glib library privilege escalation

gfilecopy function sets symbolic link's permission if source file is copied by symbolic link...

GNOME glib库g_file_copy函数不安全文件权限设置漏洞

CVE ID: CVE-2009-3289 GLib是GTK+和GNOME工程的基础底层核心程序库，是一个综合用途的轻量级的C程序库。 glib库gfilecopy函数将目标文件的权限设置为了符号链接的权限（777），这允许本地用户修改其他用户的文件。 GNOME glib 2.0 厂商补丁： GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.gnome.org/...

Directory traversal

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

DEBIAN-CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...