5016 matches found
CVE-2007-6006
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors...
CVE-2007-4683
Directory traversal vulnerability in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to bypass the chroot mechanism via a relative path when changing the current working directory...
Directory traversal
Directory traversal vulnerability in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to bypass the chroot mechanism via a relative path when changing the current working directory...
CVE-2007-4683
Apple Mac OS X 10.4.x kernels are affected by CVE-2007-4683, a local directory traversal vulnerability in the kernel that allows a local user to bypass chroot restrictions by using a relative path when changing the current working directory. The issue affects Mac OS X 10.4 through 10.4.10; impact...
TestLink < 1.7.1 Authorization Mechanism Failure
Binary data 4283.prm...
Cross site scripting
Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...
CVE-2007-5227
Multiple cross-site scripting XSS vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the 1 subjectt and 2 bodytext parameters. NOTE: vector 2...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the 1 subjectt and 2 bodytext parameters. NOTE: vector 2...
CVE-2007-5227
Multiple cross-site scripting XSS vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the 1 subjectt and 2 bodytext parameters. NOTE: vector 2...
Green crack Office software protection password-vulnerability warning-the black bar safety net
As is well known, we in the use of Office software packages, you can set open password or a modify with the write-protection password, to avoid being someone else to steal private information. But the days long, even if their own are forgotten once set what the password what do I do? Perhaps you'...
CVE-2007-4566
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind...
"BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer)
I discovered a new weakness in BIND 9 DNS server which enables "DNS Forgery Pharming". An attacker can remotely poison the cache of any BIND 9 caching DNS server and force users who use this DNS server to reach fraudulent websites each time they try to access real websites. BIND 9 is the most...
CVE-2007-3768
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...
Authentication flaw
MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests...
Sun Solaris管理控制台认证和日志机制远程权限提升漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris管理控制台（SMC）的日志机制和认证机制中存在安全漏洞，可能允许本地或远程非特权用户获得对Solaris系统的非授权root用户访问。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以root用户权限执行以下命令停止SMC服务器。 Solaris 8和9： /etc/init.d/init.wbem stop Solaris 10...
CVE-2007-3093
Unspecified vulnerability in the logging mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server...
CVE-2007-3094
CVE-2007-3094 affects Sun Solaris Solaris Management Console (SMC) on Solaris 8–10 prior to 20070605. The issue is an unspecified vulnerability in the authentication mechanism that allows remote authenticated users to execute arbitrary code via the WBEM server. Exploitation is described as networ...
CVE-2007-3094
Unspecified vulnerability in the authentication mechanism in Solaris Management Console SMC on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server...
Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability
Hi, Here binagres aka ..., for all the "vinagreta" : ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : - eTrust...
eTrust AntiVirus Agent r8 - Local Privilege Escalation
/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...