CVE-2004-2131: Undefined Security Weakness

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...

CVE-2005-1631

booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...

CVE-2005-1631

booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...

CVE-2005-1631: Undefined Security Weakness

booby.php in Booby 1.0.0 and earlier allows remote attackers to view private bookmarks by guessing item IDs...

arpwatch, libpcap, tcpdump security update

CentOS Errata and Security Advisory CESA-2005:421 Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. These updated packages also add support for output files larger than ...

CA eTRUST IDS Detection

Binary data 2795.prm...

CVE-2004-0944

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie...

CVE-2004-0944: Undefined Security Weakness

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie...

Cisco Security Advisory: ACNS Denial of Service and Default Admin Password Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Advisory: ACNS Denial of Service and Default Admin Password Vulnerabilities ====================================================================== Revision 1.0 For Public Release 2005 February 24 1600 UTC GMT...

Cisco IDS Plaintext Telnet Service Detection

Binary data 2584.prm...

CVE-2004-0499

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

MS04-045: WINS Code Execution (870763)

The remote Windows Internet Naming Service WINS server is prone to a heap overflow attack that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet to port 42 of the remote host. C Tenable Network Security,...

[SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 597-1 [email protected] http://www.debian.org/security/ Martin Schulze November 25th, 2004 http://www.debian.org/security/faq -...

NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2004-02 Topic: HP-UX stmkfont Local Privilege Escalation Vulnerability Release Date: 2004-10-20 CVE CAN ID: CAN-2004-0965 http://www.nsfocus.com/english/homepage/research/0402.htm Affected system: =================== - - HP-...

SUSE-SA:2004:038: libtiff

The remote host is missing the patch for the advisory SUSE-SA:2004:038 libtiff. libtiff is used by image viewers and web browser to view 'TIFF' images. These usually open and display those images without querying the user, making a normal system by default vulnerable to exploits of image library...

SUSE-SA:2004:037: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:037 kernel. An integer underflow problem in the iptables firewall logging rules can allow a remote attacker to crash the machine by using a handcrafted IP packet. This attack is only possible with firewalling enabled. We would lik...

[SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 560-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2004 http://www.debian.org/security/faq -...

linux/x86 symlink /bin/sh xoring 56 bytes

linux/x86 symlink /bin/sh xoring 56 bytes. Shellcode exploit for linx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS xoring size = 56 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BI...

linux/x86 symlink /bin/sh xoring 56 bytes

No description provided by source. /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS xoring size = 56 bytes OS = BSD written by /rootteam/dev0id www.sysworld.net [email protected] BITS 32 jmp short callme main: pop esi xor ecx,e...

linux/x86 symlink /bin/sh xoring 56 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 symlink /bin/sh xoring 56 bytes ========================================= /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. short version with anti IDS...