RE: Cisco Secure ACS Cross Site Scripting Vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is Cisco PSIRT response to the statements made by Thomas Liam Romanis of Fujitsu Services Limited in their posting to BugTraq on the 15th June 2006, regarding Cisco Secure ACS LoginProxy.CGI Cross-Site Scripting Vulnerability, located at...

Windows limited service account privilege escalation

By using security tokens located in process memory it's possible to escalate privileges from limited service account, such as Network Service or Microsoft SQL Service account...

NotSoGenius.txt

Software Vulnerable Genius VideoCAM NB Driver http://download.geniusnet.com.tw/CAMERA/webnb.zip Other genius webcams with the same 'snapshot feature' might be affected with the same issue, if you have any of those please try to reproduce this issue. Affects: Windows XP / Windows 2000 Proof of...

MS Windows Media Player Plugin Overflow Exploit (MS06-006)(3)

No description provided by source. !/usr/bin/perl wmp-profiteer.pl Exploiting 'Non-Critical' Media Player Vulnerabilities for Fun and Profit By Matthew Murphy [email protected] It's come to my attention that the HTML versions of the exploit posted on several sites have become mangled. Notables...

PeopleSoft (Oracle) PSCipher Encryption Weakness

Vendor: PeopleSoft Product: People Tools Version: 8.4x Platform: Multi-platform Title: Weak Encryption Description: PeopleSoft uses PSCipher for encryption/hashing purposes. Based on observations from the output of PSCipher and on our familiarity with the cryptographic library objects and methods...

CVE-2006-0151

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...

CVE-2006-0151

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...

Microsoft Windows - DTC Remote (MS05-051) (2)

/ Hard to exploit, isn't it? I have tested it on 10+ box, most of them allocated 0x9X0058 for me, however, I cannot write the pointer to 0x7ffdf020 since the length I can control should be divided exactly by 8 merde, so I choose 0x684191c4. This following program is mostly like a D.O.S. 10+...

ibillpm.pl

The 'ibillpm.pl' CGI is installed. Some versions of this CGI use a weak password management system that can be brute-forced. No flaw was tested. Your script might be a safe version. Solutions : upgrade the script if possible. If not: 1 Move the script elsewhere security through obscurity 2 Reques...

Skype URI handling routine contains a buffer overflow

Overview A buffer overflow in Skype may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. There is a buffer overflow in the routines that handle Skype-specific URIs callto:// or skype://. The buffer overflow may...

[SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 870-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

[SA17305] Skype Multiple Buffer Overflow Vulnerabilities

TITLE: Skype Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA17305 VERIFY ADVISORY: http://secunia.com/advisories/17305/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Skype for Pocket PC 1.x http://secunia.com/product/4252/ Skype for Mac OS X 1....

[Full-disclosure] [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 870-1 [email protected] http://www.debian.org/security/ Martin Schulze October 25th, 2005 http://www.debian.org/security/faq -...

PowerDNS 2.9.18 fixes two security issues affecting users of LDAP backend or limited recursion

PowerDNS 2.9.18 fixes two bugs with security implications, which only apply to installations running on the LDAP backend, or installations providing recursion to a limited range of IP addresses. If any of these apply to you, an upgrade is highly advised. Version 2.9.18 release notes are on:...

CVE-2002-1946

The CVE-2002-1946 entry applies to Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software version 1.2.000. The issue is that when the Save Password option is used, the password is stored in the registry using a weak, one-to-one encryption scheme, allowing local users to obtain and decrypt...

CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2005-1418

CVE-2005-1418 affects NetLeaf Limited NotJustBrowsing 1.0.3. The vulnerability arises because the View Lock Password is stored in plaintext in the notjustbrowsing.prf file, allowing local users to gain privileges. The NVD entry provides a base score of 4.6 (Medium) with local attack vector and lo...

CVE-2005-1418

NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges...

CVE-2005-1418

NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges...

NotJustBrowsing 1.0.3 - Local Password Disclosure

/ NotJustBrowsing 1.0.3 Local Password Disclosure Exploit by Kozan Application: NotJustBrowsing 1.0.3 Procuder: www.notjustbrowsing.com Vulnerable Description: NotJustBrowsing 1.0.3 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA www.netmagister.com -...