Gentoo Security Advisory GLSA 200506-22 (sudo)

The remote host is missing updates announced in advisory GLSA 200506-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200404-08 (automake)

The remote host is missing updates announced in advisory GLSA 200404-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)

No description provided by source. / Debian maybe other derivates |KUDUBUTUNTU| OpenSSH Remote -=Authenticated=- SELinux Privilege Elevation Fedora/RHEL Linux should be tested because it MAY contain the same vulnerability in it's OpenSSH patches in a time slice. Latest OpenSSH should not be...

debopenssh-auth.txt

/ Debian maybe other derivates |KUDUBUTUNTU| OpenSSH Remote -=Authenticated=- SELinux Privilege Elevation Fedora/RHEL Linux should be tested because it MAY contain the same vulnerability in it's OpenSSH patches in a time slice. Latest OpenSSH should not be vulnerable. Older Debian Releases may. O...

Debian OpenSSH Remote SELinux Privilege Elevation Exploit (auth)

Exploit for linux platform in category remote exploits ================================================================ Debian OpenSSH Remote SELinux Privilege Elevation Exploit auth ================================================================ / Debian maybe other derivates |KUDUBUTUNTU|...

Linux Kernel 2.4 uselib() Privilege Elevation Exploit

No description provided by source. / Linux kernel 2.4 uselib privilege elevation exploit. original exploit source from http://isec.pl reference: http://isec.pl/vulnerabilities/isec-0021-uselib.txt I modified the Paul Starzetz's exploit, made it more possible to race successfully. The exploit stil...

MS08-039: Vulnerabilities in Outlook Web Access for Exchange Server Could Allow Elevation of Privilege (953747)

The remote host is running a version of Outlook Web Access OWA for Exchange Server that is vulnerable to multiple cross-site scripting issues in the HTML parser and Data validation code. These vulnerabilities may allow an attacker to elevate his privileges by convincing a user to open a malformed...

Microsoft Security Bulletin MS08-034 – Important Vulnerability in WINS Could Allow Elevation of Privilege (948745)

Microsoft Security Bulletin MS08-034 – Important Vulnerability in WINS Could Allow Elevation of Privilege 948745 Published: June 10, 2008 | Updated: June 11, 2008 Version: 1.1 General Information Executive Summary This security update resolves a privately reported vulnerability in the Windows...

verycms2. 0 elevation of privilege vulnerability-vulnerability warning-the black bar safety net

code: passportclient.php function Loginipwrite$winduid global $db,$timestamp,$onlineip; $logininfo="$onlineip|$timestamp|6"; $db-update "UPDATE pwuser SET lastvisit=thisvisit,thisvisit="$timestamp",onlineip="$logininfo" WHERE uid="$winduid""; Look at the$onlineip how to Global.php...

Microsoft Security Bulletin MS08-025 – Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

Microsoft Security Bulletin MS08-025 – Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege 941693 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Windows kernel. A local...

Moderate: Red Hat Security Advisory: dbus security update

Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between applications. It is used both for the system-wide...

ListManager < 9.3b / 9.2c / 8.95d Multiple Vulnerabilities

The remote host is running ListManager, a web-based commercial mailing list management application from Lyris. According to its banner, the version of ListManager installed on the remote host relies on client-side code to validate unspecified form parameters before processing them. An attacker wh...

Samba 3.0.27a send_mailslot() Remote Buffer Overflow PoC

No description provided by source. / http://secunia.com/secuniaresearch/2007-99/advisory/ A remote attacker could send a specially crafted "SAMLOGON" domain logon packet, possibly leading to the execution of arbitrary code with...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 4542)

The IBM Java JRE/SDK has been brought to release 1.4.2 SR9, containing several bugfixes, including the following security fixes : - A buffer overflow vulnerability in the image parsing code in the JavaTM Runtime Environment may allow an untrusted applet or application to elevate its privileges. F...

Microsoft SharePoint Server跨站脚本漏洞（MS07-059）

BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...

VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities

The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...

iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Directory Creation Vulnerability

IBM DB2 Universal Database Directory Creation Vulnerability iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. For...

Microsoft Virtual PC/Virtual Server堆溢出漏洞（MS07-049）

BUGTRAQ ID: 25298 CVECAN ID: CVE-2007-0948 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具，允许在同一台计算机上运行多个操作系统。 Microsoft Virtual PC和Microsoft Virtual Server中存在权限提升漏洞，这可能允许对虚拟机操作系统拥有管理员权限的用户在主机操作系统或其他虚拟机操作系统上运行代码。...

MS07-049: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

The remote host is running a version of Virtual PC or Virtual Server that is vulerable to a heap overflow that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on the host operating system or others guests. To succeed, the attacker needs administrative...

GLSA-200707-10 : Festival: Privilege elevation

The remote host is affected by the vulnerability described in GLSA-200707-10 Festival: Privilege elevation Konstantine Shirow reported a vulnerability in default Gentoo configurations of Festival. The daemon is configured to run with root privileges and to listen on localhost, without requiring a...