CVE-2007-5093

The CVE-2007-5093 issue affects the Linux kernel pwc (Philips USB Webcam) driver in 2.6.x up to 2.6.22.5, where disconnect relies on user space to close the device. This can allow a user-assisted local attacker to cause a denial of service (USB subsystem hang and khubd CPU usage) by not closing t...

Linux Kernel 2.6.x - Ptrace Privilege Escalation

Linux Kernel 2.6.x - Ptrace Privilege Escalation / source: https://www.securityfocus.com/bid/25774/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue may allow local attackers to gain elevated privileges, facilitating the complete compromise of...

Linux Kernel 2.6.x - Ptrace Privilege Escalation

/ source: https://www.securityfocus.com/bid/25774/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue may allow local attackers to gain elevated privileges, facilitating the complete compromise of affected computers. Versions of Linux kernel prior t...

USN-510-1: Linux kernel vulnerabilities

A flaw was discovered in the PPP over Ethernet implementation. Local attackers could manipulate ioctls and cause kernel memory consumption leading to a denial of service. CVE-2007-2525 An integer underflow was discovered in the cpuset filesystem. If mounted, local attackers could obtain kernel...

iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Multiple File Creation Vulnerabilities

IBM DB2 Universal Database Multiple File Creation Vulnerabilities iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end database...

GFax 0.7.6 - Temporary Files Local Arbitrary Command Execution

GFax 0.7.6 - Temporary Files Local Arbitrary Command Execution source: https://www.securityfocus.com/bid/24780/info GFAX is prone to a vulnerability that lets local attackers execute arbitrary commands with superuser privileges. Successful attacks will result in the complete compromise of affecte...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

Windows Telephony API buffer overflow

Added: 06/12/2007 CVE: CVE-2005-0058 BID: 14518 OSVDB: 18606 Background The Windows Telephony API TAPI provides telecommunications support for Windows applications. Problem A buffer overflow in the Windows Telephony API allows local attackers to execute commands with administrative privileges...

HP Tru64 5.0.1 - DOP Command Privilege Escalation

source: https://www.securityfocus.com/bid/23881/info HP Tru64 for UNIX is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable...

iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability

Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Symantec Norton Ghost is a backup and recovery application designed to allow users to completely restore the...

CVE-2007-1926

Cross-site scripting XSS vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via 1 http or 2 ftp requests logged in /var/log/directadmin/security.log; 3 allows context-dependent...

Linux Kernel IPV6_SockGlue.c NULL指针引用漏洞

Linux是一款开放源代码的操作系统。 Linux Kernel IPV6SockGlue.c存在NULL指针引用问题，本地攻击者可以利用漏洞可对内核进行拒绝服务攻击，导致系统崩溃。 目前没有详细漏洞细节提供。 Linux kernel 2.6.20 Linux kernel 2.6.20 Linux kernel 2.6.19 1 Linux kernel 2.6.19 .2 Linux kernel 2.6.19 .1 Linux kernel 2.6.19 -rc4 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Lin...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - UDP Denial of Service

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - UDP Denial of Service !/usr/bin/perl TFTPDWIN Server UDP DOS 0.4.2 POC written By : Umesh Wanve [email protected] ------------------------------------------------------------------------------- TFTPDWIN Server is a Freeware TFTP server for Windows 9x/NT/XP...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - 'UDP' Denial of Service

!/usr/bin/perl TFTPDWIN Server UDP DOS 0.4.2 POC written By : Umesh Wanve [email protected] ------------------------------------------------------------------------------- TFTPDWIN Server is a Freeware TFTP server for Windows 9x/NT/XP. http://www.tftpserver.prosysinfo.com.pl A vulnerability has...

Zend Platform 2.2.1 - 'PHP.INI' File Modification

source: https://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' program that may be executed by local users and will...

CORE-2006-1127: ProFTPD Controls Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://www.coresecurity.com/corelabs/ ProFTPD Controls Buffer Overflow Date Published: 2006-12-13 Last Update: 2006-12-12 Advisory ID: CORE-2006-1127 Bugtraq ID: None currently assigned CVE Name: None...

SUSE-SA:2006:073: mono-core

The remote host is missing the patch for the advisory SUSE-SA:2006:073 mono-core. Sebastian Krahmer of SUSE Security found that the Mono System.Xml.Serialization class contained a /tmp race which potentially allows local attackers to execute code as the user using the Serialization method. This i...

SUSE-SA:2007:008: XFree86-server,xorg-x11-server,xloader

The remote host is missing the patch for the advisory SUSE-SA:2007:008 XFree86-server,xorg-x11-server,xloader. This update fixes three memory corruptions within the X server which could be used by local attackers with access to this display to crash the X server and potentially execute code...

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability

WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability ------------------------------------------------------------------ SUMMARY: A vulnerability has been identified in Winzip 10.0 Build 6667,May be other version, which could be exploited by remote or local...