FreeBSD Ports: wu-ftpd

The remote host is missing an update to the system as announced in the referenced advisory. VID 3b7c7f6c-7102-11d8-873f-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Integer overflow

Integer overflow in the sctpsetsockoptauthkey function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel 2.6.24-rc1 through 2.6.26.3 allows remote attackers to cause a denial of service panic or possibly have unspecified other impact via a...

openssl mitm downgrade attack

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSLOPMSIESSLV2RSAPADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to u...

CVE-2008-1945

QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

RHEL 4 : vsftpd (RHSA-2008:0680)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0680 advisory. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of vsftpd as shipped in Red...

OpenSSH X11 < 5.1 Session Hijacking

Binary data 4598.prm...

DNS BailiWicked Domain Attack

This exploit attacks a fairly ubiquitous flaw in DNS implementations which Dan Kaminsky found and disclosed Jul 2008. This exploit replaces the target domains nameserver entries in a vulnerable DNS cache server. This attack works by sending random hostname queries to the target DNS server coupled...

OP XAUTHORITY变量本地特权提升漏洞

BUGTRAQ ID: 30226 CNCAN ID：CNCAN-2008071606 OP是一款类似sudo的可替代程序。 OP处理XAUTHORITY变量存在缓冲区溢出，本地攻击者可以利用漏洞提升特权。 当OP使用--enable-xauth配置，并在op.conf中使用xauth配置选项，提交超长数据作为XAUTHORITY变量数据,可触发缓冲区溢出，以高权限执行任意代码，提升特权。 op 1.32 可参考如下安全补丁： http://swapoff.org/changeset/563...

Joomla Component n-forms 1.01 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Joomla Component n-forms 1.01 Blind SQL Injection Exploit ========================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1...

joomlamygallery-sql.txt

H-T Team HouSSamix & ToXiC350 ===================================================================== Joomla Component mygallery Remote SQL Injection Exploit ===================================================================== AUTHOR : HouSSamix From H-T TeaM Script : mygallery Joomla Component...

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description Tavis Ormandy of the Google Security team reported a heap-based buffer overflow when compiling regular expression patterns containing "Internal Option Settings" such as "?i ". Impact A remot...

openssl mitm downgrade attack

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSLOPMSIESSLV2RSAPADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to u...

SOL8924 - Linux kernel vulnerability CVE-2007-3843

A flaw in the CIFS handling of the mount option sec= that did not enable integrity checking and did not produce any error message. Information about this advisory is available at the following location:...

CVE-2008-2547: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attackers to execute arbitrary code via a long GUID value for the /x aka /uninstall option. NOTE: this issue might cross privilege boundaries if msiexec.exe is...

CVE-2007-5962

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux RHEL 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service memory consumption via a large number of CWD commands, as demonstrated by an...

vsftpd: memory leak when deny_file option is set

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux RHEL 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service memory consumption via a large number of CWD commands, as demonstrated by an...

PT-2008-1526 · Vsftpd +1 · Vsftpd +1

Name of the Vulnerable Software and Affected Versions: vsftpd version 2.0.5 Description: A memory leak issue exists, allowing remote attackers to cause a denial of service by consuming memory via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny file...

LHA extrace_one Vuffer Overflow Vulnerability

Overview LHA lhext.c contains a buffer overflow vulnerability with the extractone funcation, which stems from improper handling of a 'w' option argument. Impact An remote attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section for official remediation and...

Low: Red Hat Security Advisory: nss_ldap security and bug fix update

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...