Debian: Security Advisory (DSA-1515-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0949

Unspecified vulnerability in IBM Informix Dynamic Server IDS 7.x through 11.x allows remote attackers to gain privileges via a malformed connection request packet...

CVE-2008-0949

CVE-2008-0949 affects IBM Informix Dynamic Server (IDS) 7.x–11.x. Multiple connected sources describe an unspecified vulnerability that allows remote attackers to gain privileged access via a malformed connection request packet, implying a remote, unauthenticated privilege escalation with potenti...

Debian DSA-1515-1 : libnet-dns-perl - several vulnerabilities

Several remote vulnerabilities have been discovered in libnet-dns-perl. The Common Vulnerabilities and Exposures project identifies the following problems : It was discovered that libnet-dns-perl generates very weak transaction IDs when sending queries CVE-2007-3377 . This update switches...

Design/Logic Flaw

A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...

CVE-2008-1148

A certain pseudo-random number generator PRNG algorithm that uses ADD with 0 random hops aka "Algorithm A0", as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as 1 DNS transaction IDs or 2 IP fragmentation IDs by observing a...

Design/Logic Flaw

A certain pseudo-random number generator PRNG algorithm that uses ADD with 0 random hops aka "Algorithm A0", as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as 1 DNS transaction IDs or 2 IP fragmentation IDs by observing a...

CVE-2008-1146

A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...

CVE-2008-1148

A certain pseudo-random number generator PRNG algorithm that uses ADD with 0 random hops aka "Algorithm A0", as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as 1 DNS transaction IDs or 2 IP fragmentation IDs by observing a...

CVE-2008-1147

CVE-2008-1147 describes a weakness in a PRNG that uses XOR and 2-bit random hops (Algorithm X2) used in OpenBSD 2.6–3.4, macOS 10–10.5.1, FreeBSD 4.4–7.0, and DragonFlyBSD 1.0–1.10.1. The vulnerability allows remote attackers to infer sensitive values such as IP fragmentation IDs by observing a s...

CVE-2008-0768

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

Heap overflow

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager ISM, as used in Informix Dynamic Server IDS 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests...

CVE-2008-0768

CVE-2008-0768 affects IBM Informix Storage Manager (ISM) Windows RPC components used by Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier. The issue consists of multiple stack-based and heap-based buffer overflows that attackers could trigger with crafted XDR requests ...

Information disclosure

onedcu in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument...

Code injection

Multiple unspecified programs in IBM Informix Dynamic Server IDS 10.x before 10.00.xC8 allow local users to create arbitrary files by specifying the target file in the SQLIDEBUG environment variable, whose ownership is changed to the user invoking the programs...

CVE-2008-0368

CVE-2008-0368 affects IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.xC8. The vulnerability arises in the set-uid onedcu tool, where the second parameter Trace file is opened for writing with elevated privileges, enabling local attackers to create arbitrary files and potentially gain root ...

Lotus Domino Web Access ActiveX control dwa7w.dll buffer overflow

Added: 12/31/2007 CVE: CVE-2007-4474 BID: 26972 OSVDB: 40954 Background Lotus Domino Web Access provides capabilities similar to those of the Lotus Notes client, delivered through a web browser. Problem A buffer overflow vulnerability in the Lotus Domino Web Access ActiveX control in the dwa7w.dl...

runcms-sqlids.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT: December 25, 2007 / / Written by:...

RunCMS 1.6 Remote Blind SQL Injection Exploit (IDS evasion)

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public&...

RunCMS 1.6 - Blind SQL Injection (IDS Evasion)

RunCMS 1.6 - Blind SQL Injection IDS Evasion // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public...