PHP Remote File Inclusion

Added: 01/28/2010 Background PHP scripts support the include and require statements, which cause an outside script to be run within the calling script. The included script can be a local file or, in some configurations, the URL of a remote file. Problem The PHP script is vulnerable to a remote fi...

Microsoft Internet Explorer Style getElementsByTagName Memory Corruption

$Id: ms09072styleobject.rb 7775 2009-12-09 15:06:26Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

X.Org X Font Server Handlers Integer Overflow (CVE-2007-4568)

X.Org foundation's X Window System commonly X11 or X Window is a networking and display protocol which provides windowing on bitmap displays. It provides the standard toolkit and protocol to build graphical user interfaces GUIs on Unix-like operating systems and OpenVMS, and is supported by almos...

Squid Gopher Protocol Handling Buffer Overflow (CVE-2005-0094)

Squid is a full featured, open source web proxy caching server. It supports proxying of variety of protocols including FTP, HTTP, DNS and Gopher. A vulnerability exists in the way Squid web proxy handles responses from Gopher servers. An overly long line in a Gopher response can overflow a fixed...

Internet Explorer FTP Response Parsing Memory Corruption (MS07-016; CVE-2007-0217)

Microsoft Internet Explorer IE is a web browser application that is included as part of Microsoft Windows operating systems. Microsoft Windows Internet WinINet application programming interface API in Internet Explorer is a component to serve as application interface for Internet protocols, such ...

CPE Inventory

This routine uses information collected by other routines about CPE identities of operating systems, services and applications detected during the scan. Note: Some CPEs for specific products might show up twice or more in the output. Background: After a product got renamed or a specific vendor wa...

Microsoft: Vista Infected 62% Less Often Than XP

Windows Vista is dramatically more secure than Windows XP, according Microsoft’s latest Security Intelligence Report. The infection rate of Windows Vista SP1 was 61.9 percent less than Windows XP SP3, the company said. The report covers the first half of 2009 and is the seventh such twice-yearly...

Cross site scripting

The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...

CVE-2009-3294

The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...

Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit

Exploit for unknown platform in category local exploits ======================================================================= Adobe Acrobat/Reader 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit ======================================================================= !/usr/bin/env python Acroba...

Multiple BSD Operating Systems setusercontext() Vulnerabilities

Exploit for multiple platform in category local exploits =============================================================== Multiple BSD Operating Systems setusercontext Vulnerabilities =============================================================== BSD setusercontext vulnerabilites discovered by...

Fedora Core 11 FEDORA-2009-8336 (apr)

The remote host is missing an update to apr announced via advisory FEDORA-2009-8336. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Google Android Security Chief: Smartphone Attacks on the Way

As smartphones become even smarter, they are going to attract more and more attention from attackers, spammers and others looking to take control of the billions of mobile devices in use today, the head of Google’s Android security team said. In a talk at the USENIX Security symposium Wednesday,...

MS09-044: Description of the security update for Remote Desktop Client version 6.0 and 6.1: August 11, 2009

None None...

VMSA-2008-0018 : VMware Hosted products and patches for ESX and ESXi resolve two security issues

a. A privilege escalation on 32-bit and 64-bit guest operating systems VMware products emulate hardware functions and create the possibility to run guest operating systems. A flaw in the CPU hardware emulation might allow the virtual CPU to incorrectly handle the Trap flag. Exploitation of this...

Oops! About xscreensaver 5.01

Hello list, Just to clarify, I tested some operating systems against the xscreensaver vulnerability I posted yesterday. It affects at least xscreensaver 5.01. It does not affect recent versions as reported by the Debian bug tracking people, this is confirmed. Sorry about not catching this. Best...

Re: [Full-disclosure] Oops! About xscreensaver 5.01

Hmmm, sorry for flooding the list but it seems it doesnt even affect xscreensaver 5.01. I will investigate when the vuln when I have time and keep you informed. There has to be some strange conf on my Opensolaris : Best Regards, kcope 2009/7/6 Kingcope [email protected]: Hello list, Just to...

CVE-2009-0689

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

Heap overflow

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

lighttpd PHP File Trailing Slash Request Source Disclosure

The version of lighttpd running on the remote host discloses the source code of files such as PHP scripts when a '/' is appended to a URL corresponding to a symbolic link. This vulnerability occurs only on certain operating systems FreeBSD, Mac OS X, and Solaris prior to version 10 are known to b...