Mac OS X vpnd local format string

======= Summary ======= Name: Mac OS X vpnd local format string Release Date: 29 May 2007 Reference: NGS00496 Discover: Chris Anley [email protected] Vendor: Apple Vendor Reference: 26417237 CVE-ID: CVE-2007-0753 Systems Affected: OS X Server 10.4.9 and prior Risk: High Status: Published...

Multiple Personal Firewall Products - Local Protection Mechanism Bypass

source: https://www.securityfocus.com/bid/23987/info Multiple personal firewall products are prone to a vulnerability that lets attackers bypass protection mechanisms. This issue occurs because the applications fail to properly implement protection mechanisms based on valid process identifiers...

MS Windows Vista forged ARP packet Network Stack DoS Exploit

No description provided by source. !/usr/bin/env python :: Kristian Hermansen :: Date: 20070514 Reference: CVE-2007-1531 Description: Microsoft Windows Vista SP0 dumps interfaces when it receives this ARP packet. This DoS is useful for an internet cafe, wireless venue, or legitimate local attack...

MS Windows Vista forged ARP packet Network Stack DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ MS Windows Vista forged ARP packet Network Stack DoS Exploit ============================================================ !/usr/bin/env python :: Kristian Hermansen :: Date: 20070514...

Mandrake Linux Security Advisory : php (MDKSA-2007:102)

A heap buffer overflow flaw was found in the xmlrpc extension for PHP. A script that implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the apache user. This flaw does not, however, affect PHP applications using the pure-PHP XMLRPC class...

CVE-2007-2511

Buffer overflow in the userfilterfactorycreate function in PHP before 5.2.2 has unknown impact and local attack vectors...

CVE-2007-2511

Buffer overflow in the userfilterfactorycreate function in PHP before 5.2.2 has unknown impact and local attack vectors...

Buffer overflow

Buffer overflow in the userfilterfactorycreate function in PHP before 5.2.2 has unknown impact and local attack vectors...

AFFLIB多个格式串处理漏洞

AFFLIB是用于操作高级取证格式（AFF）文件的开源函数库。 AFFLIB的一些命令行工具实现上存在格式串处理漏洞，本地攻击者可能利用此漏洞提升自己的权限。 这些工具以格式串参数向warn和err调用传输一些命令行参数。如果攻击者能够影响这些命令行参数的话，就可能导致执行任意指令。 s3格式串注入 文件：lib/s3.cpp 行数：207 err调用中的一个命令行参数用作了格式串，如果攻击者能够影响名称的话就可以导致格式串注入漏洞。192-207行说明了这个问题： void s3cpconst char fname,string key struct s3headers meta2 =...

Linux Kernel 2.6.x - NETLINK_FIB_LOOKUP Local Denial of Service

/ source: https://www.securityfocus.com/bid/23677/info The Linux kernel is prone to a denial-of-service vulnerability. This issue presents itself when a NETLINK message is misrouted. A local attacker may exploit this issue to trigger an infinite-recursion stack-based overflow in the kernel. This...

CVE-2007-2134

Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01...

CVE-2007-2134

Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23Q1 and 8.96.I1 has unknown impact and local attack vectors, aka JDE01...

ZoneAlarm Vsdatant.SYS驱动本地拒绝服务漏洞

ZoneAlarm是一款流行的个人防火墙系统。 ZoneAlarm 'vsdatant.sys'驱动处理参数存在问题，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 SSDT函数句柄执行在内核模式下执行，但他们的调用者执行在用户模式下，因此所有函数参数来自用户模式，所以必须严格验证这些参数，不正确使用这些函数可导致系统崩溃。 ZoneAlarm在SSDT中hook多个函数，其中至少有2个情况下缺少丢来自用户模式下的参数数据，由于Kerio驱动fwdrv.sys和khips.sys驱动的错误，用户调用不合法的NtCreateKey和NtDeleteFile参数值可导致系统崩溃。 Zon...

IBM Tivoli Business Service Manager NCISETUP.DB和MSI.LOG密码泄露漏洞

IBM Tivoli Business Service Manager是一款基于策略的电子商务访问控制解决方案。 IBM Tivoli Business Service Manager存在设计错误，本地攻击者可以利用漏洞获得密码信息。 问题是NCISETUP.DB和MSI.LOG文件会泄露密码信息。目前没有详细漏洞细节提供。 IBM Tivoli Business Service Manager 4.1 可参考如下安全公告获得补丁信息： http://www-1.ibm.com/support/docview.wss?uid=swg24015473...

TrueCrypt Dismount Set-EUID本地拒绝服务漏洞

TrueCrypt是一款免费开源虚拟加密盘加密软件。 TrueCrypt存在设计错误，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 本地攻击者可以卸挂其他用户挂接的驱动盘，导致拒绝服务攻击。目前没有详细漏洞细节提供。 TrueCrypt TrueCrypt 4.2 TrueCrypt TrueCrypt 4.1 TrueCrypt TrueCrypt 4.0 TrueCrypt TrueCrypt 3.0 升级到最新程序： http://www.truecrypt.org/docs/?s=version-history...

Linux Kernel Omnikey CardMan 4040驱动本地溢出漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Omnikey CardMan 4040驱动中read和write函数存在缓冲区溢出，本地攻击者可能利用此漏洞控制服务器。 如果本地攻击者以大于512字节的缓冲区调用了上述函数的话，就可以触发这个溢出，导致拒绝服务或以内核权限执行任意指令。 Linux kernel 2.6.21-RC3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.21-rc3.bz...

IBM AIX rdist工具本地缓冲区溢出漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的rdist工具实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升在系统中的权限。 IBM AIX 5.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ers.ibm.com/...

Default credentials

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...

CVE-2007-0482

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...

CVE-2007-0482

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...