Mandrake Linux Security Advisory : curl (MDKSA-2005:224)

Stefan Esser discovered that libcurl's URL parser function can have a malloced buffer overflows in two ways if given a too long URL. It cannot be triggered by a redirect, which makes remote exploitation unlikely, but can be passed directly to libcurl allowing for local exploitation and could also...

[Full-disclosure] iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability

Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability iDefense Security Advisory 12.22.05 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=362 December 22, 2005 I. BACKGROUND Linux is a clone of the operating system Unix, written from scratch by Linus Torvalds with...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability

SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO OpenServer is a UNIX-like operating system for x86 platforms. II. DESCRIPTION Local exploitation...

WinAce2605.txt

=========================================================================== Application: WinAce http://www.winace.com/ Versions: 2.6.0.5 Platforms: Windows Bug: buffer-overflow Exploitation: local Date: Jul 22 2004 Author: ATmaCA e-mail: [email protected] web: http://www.atmacasoft.com Credit:...

PortailPHP.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: yes Credit: ABDUCTER --- [email protected] OR [email protected] Vulnerable: PortailPHP 2.4 and all version info :- PortailPHP POWERFUL FORUM AND formal site http://www.portailphp.com/ there is sql in index.php...

GoText 1.01 - Local User Informations Disclosure

/ GoText 1.01 Local User Informations Disclosure Exploit by Kozan Application: GoText 1.01 Vendor: StumbleInside Software - www.stumbleinside.com Vulnerable Description: GoText 1.01 discloses user informations to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web: www.netmagister.com...

iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview Information Disclosure Vulnerability

SGI IRIX grosview Information Disclosure Vulnerability iDEFENSE Security Advisory 04.07.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 7, 2005 I. BACKGROUND The grosview application is a setuid root application that provides a graphical display of usage of certain...

thaiXSS.txt

-=--------------------ADVISORY-------------------=- -= =- -= THai's Shoutbox =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: THai's Shoutbox -=+ Version: not available -=+ Vendor's URL: not available -=+ Platform:...

Gene6 FTP Server Local Privilege Escalation Vulnerability

Gene6 FTP Server Local Privilege Escalation Vulnerability By Sowhat 03.Mar.2005 http://secway.org/Advisory/ad20050303.txt Product: Gene6 FTP Server Vendor: Gene6 Sarl Inc. 1 Introduction Gene6 FTP Server is a popular FTP Server for Microsoft Windows platforms. For more information:...

iDEFENSE Security Advisory 02.28.05: KPPP Privileged File Descriptor Leak Vulnerability

KPPP Privileged File Descriptor Leak Vulnerability iDEFENSE Security Advisory 02.28.05 www.idefense.com/application/poi/display?id=208&type=vulnerabilities February 28, 2005 I. BACKGROUND KPPP is a dialer and front end for pppd. It allows for interactive script generation and network setup. More...

[Full-Disclosure] iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability

ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability iDEFENSE Security Advisory 02.11.05 www.idefense.com/application/poi/display?id=199&type=vulnerabilities February 11, 2005 I. BACKGROUND Zone Labs ZoneAlarm provides personal firewall protection. More information is available from:...

[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: IBM AIX ipl_varyon Local Buffer Overflow Vulnerability

IBM AIX iplvaryon Local Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=196&type=vulnerabilities February 10, 2005 I. BACKGROUND The iplvaryon program is a setuid root application, installed by default under multiple versions of IBM AI...

Local buffer-overflow in W32Dasm 8.93

Luigi Auriemma Application: W32Dasm was http://www.expage.com/page/w32dasm Versions: = 8.93 8.94??? Platforms: Windows Bug: buffer-overflow Exploitation: local Date: 24 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4...

iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability

SGI IRIX inpview Design Error Vulnerability iDEFENSE Security Advisory 01.13.05 www.idefense.com/application/poi/display?id=182&type=vulnerabilities January 13, 2005 I. BACKGROUND The inpview program is a setuid root application that is included in the InPerson networked multimedia conferencing...

CVE-2004-1066

The cmdline pseudofiles in 1 procfs on FreeBSD 4.8 through 5.3, and 2 linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service panic or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2...

iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability

Exim hostaton Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0725 http://www.idefense.com/application/poi/display?type=vulnerabilities January 07, 2005 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...

winaceHKI.txt

Application: WinAce, WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: ZIP File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1...

[Full-Disclosure] WinHKI - CAB File Directory Transversal

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: CAB File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introduction 2...

[Full-Disclosure] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: LHA File Incorrect Filename Handeling Leads to Crash/Underflow Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...

[Full-Disclosure] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: LHA File Incorrect Filename Handeling Leads to Crash/Underflow Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...