Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities

ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. There are Remote File Inclusion?,...

GNUBoard 4.31.04 (09.01.30) - Multiple LocalRemote Vulnerabilities

GNUBoard 4.31.04 09.01.30 - Multiple LocalRemote Vulnerabilities GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP...

Linux Kernel LDT Selector Local Privilege Escalation and Denial of Service Vulnerability

The Linux kernel is prone to a local vulnerability that may result in privilege escalation or a denial of service. This issue involves LDT Local Descriptor Table selectors in the VMI Virtual Machine Interface. Successfully exploiting this issue allows local attackers to trigger kernel crashes,...

Linux Kernel (Fedora 89) - utrace_control Null Pointer Dereference Denial of Service

Linux Kernel Fedora 89 - utracecontrol Null Pointer Dereference Denial of Service source: https://www.securityfocus.com/bid/31536/info Fedora 8 and 9 Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to...

VMware Workstation (hcmon.sys 6.0.0.45731) Local DoS Vulnerability

Exploit for unknown platform in category dos / poc ================================================================== VMware Workstation hcmon.sys 6.0.0.45731 Local DoS Vulnerability ================================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 -...

PT-2008-4373 · Postfix +1 · Postfix +1

Name of the Vulnerable Software and Affected Versions: Postfix versions prior to 2.3.15 Postfix versions 2.4 prior to 2.4.8 Postfix versions 2.5 prior to 2.5.4 Postfix versions 2.6 prior to 2.6-20080814 Description: The issue allows local users to append e-mail messages to a file to which a...

Linux Kernel 2.6.x - netipv6ip6_output.c Null Pointer Dereference Denial of Service

Linux Kernel 2.6.x - netipv6ip6output.c Null Pointer Dereference Denial of Service / source: https://www.securityfocus.com/bid/38185/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to...

[SECURITY] [DSA 1606-1] poppler packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1606-1 [email protected] http://www.debian.org/security/ Steve Kemp July 09, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Perl - 'rmtree()' Function Local Insecure Permissions

source: https://www.securityfocus.com/bid/29902/info Computers running Perl are prone to a local vulnerability that occurs when handling symbolic links. Attackers can leverage this issue to change the permissions of arbitrary files. Perl 5.10.0 is vulnerable; other versions may also be affected. ...

Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation source: https://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code wi...

CVE-2008-2552

CVE-2008-2552 affects Sun Solaris 10 and Sun Service Tag prior to 1.1.3. The issue arises in the Service Tag Registry and allows a local attacker to cause a denial of service (disk consumption) via unspecified vectors. Nessus plugins list patches 136839-01 for SPARC and 136840-01 for x86 as the r...

SOL8599 - Cross-site scripting vulnerability viewing logs from the Console section of the web management interface

A cross-site scripting XSS vulnerability in the Console feature of the BIG-IP and Enterprise Manager web management interface may allow for script excecution when viewing a log file that contains malicious content. Exploitation of this vulnerability would require an attacker to generate a log ent...

[SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1516-1 [email protected] http://www.debian.org/security/ Florian Weimer March 14, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:027 http://www.mandriva.com/security/ Package : pulseaudio Date : January 25, 2008 Affected: 2007.1, 2008.0 Problem Description: A programming flaw was found in Pulseaudio versions older than 0.9.9, by which...

[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1449-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

Extended Module Player (xmp) 2.5.1 - oxm.c dtt_load.c Multiple Local Buffer Overflow Vulnerabilities

Extended Module Player xmp 2.5.1 - oxm.c dttload.c Multiple Local Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/27047/info Extended Module Player xmp is prone to multiple local buffer-overflow vulnerabilities because it fails to perform adequate boundary checks befo...

SOL8106 - OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135

F5 Product Development has determined that the BIG-IP and Enterprise Manager products use a vulnerable version of OpenSSL; however, the vulnerable code is not used in either TMM or in Apache on the BIG-IP system. The vulnerability is considered to be a local vulnerability and cannot be exploited...

CVE-2007-5805

cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writability of this file, via a symlink attack involving use of the file's name as the argument. NOTE: thi...

Linux Kernel 2.6.x - add_to_page_cache_lru() Local Denial of Service

Linux Kernel 2.6.x - addtopagecachelru Local Denial of Service source: https://www.securityfocus.com/bid/31201/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause the kernel to crash, denying service to legitimate users. This issue...

Microsoft Windows Vista Permissive User Information Store ACLs Information Disclosure Vulnerability

Description Microsoft Windows Vista is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may allow them to gain unauthorized access to the affected computer. Technologies Affected Microsoft Windows Vista Microsoft...