389 matches found
Ubuntu: Security Advisory (USN-403-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Redhat 6.1 man Local Exploit (egid 15)
No description provided by source. !/usr/bin/perl Redhat 6.1 man exploit - gives egid 15 Written just for fun - [email protected] $shellcode = "\xeb\x1f\x5f\x89\xfc\x66\xf7\xd4\x31\xc0\x8a\x07". "\x47\x57\xae\x75\xfd\x88\x67\xff\x48\x75\xf6\x5b"...
PT-2008-5592 · Numedia Soft · Nms Dvd Burning Sdk
Name of the Vulnerable Software and Affected Versions: NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 version 1.013C and earlier Description: The issue allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. This can...
Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...
[SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1447-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...
Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
No description provided by source. /------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll...
Ubuntu 5.10 / 6.06 LTS / 6.10 : xorg, xorg-server vulnerabilities (USN-403-1)
The DBE and Render extensions in X.org were vulnerable to integer overflows, which could lead to memory overwrites. An authenticated user could make a specially crafted request and execute arbitrary code with root privileges. Note that Tenable Network Security has extracted the preceding...
Memory overwrites in JVM via malformed TrueType font
Note: This advisory should have been published several months ago; apologies for the delay -- John Heasman ======= Summary ======= Name: Memory overwrites in JVM via malformed TrueType font Release Date: 29 October 2007 Reference: NGS00419 Discover: John Heasman [email protected] Vendor: Sun...
vainifileoverwrite-06_041.txt
Portcullis Security Advisory 06-041 Vulnerable System: Visionsoft Audit Vulnerability Title: Ths VSAOD server allows unauthenticated ini file overwrites. Vulnerability discovery and development: Portcullis Security Testing Services discovered this vulnerability during an application assessment...
Portcullis Security Advisory 06-039
Portcullis Security Advisory 06-039 Vulnerable System: Visionsoft Audit Vulnerability Title: The VSAOD server allows unauthenticated arbitrary file overwrites. Vulnerability Discovery and Development: Portcullis Security Testing Services during an application assessment. Further research was...
Portcullis Security Advisory 06-041
Portcullis Security Advisory 06-041 Vulnerable System: Visionsoft Audit Vulnerability Title: Ths VSAOD server allows unauthenticated ini file overwrites. Vulnerability discovery and development: Portcullis Security Testing Services discovered this vulnerability during an application assessment...
Chilkat Zip ActiveX Component 12.4 Multiple Insecure Methods Exploit
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------ bChilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0...
Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods
Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods ------------------------------------------------------------------------------ Chilkat Software Chilkat Zip ActiveX Component ChilkatZip2.dll v. 12.4.2.0 "SaveLastError" and "WriteExe" Insecure Methods url: http://www.chilkatsoft.com/...
NCTAudioEditor2 ActiveX DLL (NCTWMAFile2.dll v. 2.6.2.157) Exploit
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------ bNCTAudioEditor2 ActiveX DLL NCTWMAFile2.dll v. 2.6.2.157 "CreateFile"Insecure Method/b url:...
WarFTP 1.65 (USER) Remote Buffer Overflow SEH Overflow Exploit
No description provided by source. =============================================================================================== WarFTP 1.65 USER Remote Buffer Overflow SEH overflow Exploit By Umesh Wanve...
USN-403-1: X.org vulnerabilities
The DBE and Render extensions in X.org were vulnerable to integer overflows, which could lead to memory overwrites. An authenticated user could make a specially crafted request and execute arbitrary code with root privileges...
[USN-403-1] X.org vulnerabilities
=========================================================== Ubuntu Security Notice USN-403-1 January 09, 2007 xorg, xorg-server vulnerabilities CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 =========================================================== A security issue affects the following Ubuntu...
CVE-2006-6499
The jsdtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins tha...
DEBIAN-CVE-2006-4346
Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to 1 execute code via format string specifiers or 2 overwrite files via directory traversals involving unspecified vectors, as demonstrated by the...
Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability
Exploit for unknown platform in category dos / poc =================================================================== Microsoft Word 2000/2003 Unchecked Boundary Condition Vulnerability ===================================================================...