Progress Database Server 8.3b (prodb) Local Root Exploit

No description provided by source. / progress database server v8.3b local root compromise. for sco-unix and linux on linux redhat 6.2 and SCOSV scosysv 3.2 5.05 this is just one of it, advisory about the bug discovery grabbed from packetstorm, which was originally found by:...

CVE-2006-4619

The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the 1 IParam parameter, and the 2 PBMGETRANGE and 3 PBMSETRANGE messages in an unspecified progress bar. NOTE: some details are...

Microsoft HTML Help Workshop - .hhp Denial of Service

Microsoft HTML Help Workshop - .hhp Denial of Service OPTIONS Compatibility=1.1 or later Compiled...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

Exploit for unknown platform in category dos / poc ====================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit new ====================================================================== OPTIONS Compatibility=1.1 or later...

Microsoft HTML Help Workshop (.hhp file) Denial of Service

No description provided by source. OPTIONS Compatibility=1.1 or later Compiled...

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

MySource 2.14 - upgrade_in_progress_backend.php?target_url Cross-Site Scripting

MySource 2.14 - upgradeinprogressbackend.php?targeturl Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

CVE-2004-2743

upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files...

shatterSEH3.txt

============================================================================ = Shattering SEH III = = [email protected] = http://www.security-assessment.com = = Originally posted: September 29, 2003 ============================================================================ ==...

CVE-2003-0449

Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via 1 a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so inproapsv, or 2 the -installdir command line parameter, as...

CVE-2003-0485

Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...

CVE-2003-0485

CVE-2003-0485 describes a buffer overflow in Progress 4GL Compiler 9.1D06 and earlier. The vulnerability occurs when compiling source code containing a long, invalid data type, potentially allowing an attacker to execute arbitrary code. According to the provided documents, the exploit details are...

CVE-2003-0485

Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...

CVE-2003-0485: Undefined Security Weakness

Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...

SRT2003-06-20-1232 - Progress 4GL Compiler datatype overflow

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems...

CVE-2003-0449

Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via 1 a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so inproapsv, or 2 the -installdir command line parameter, as...

CVE-2003-0449

Progress Database 9.1 to 9.1D06 is affected by an input-trust flaw in library loading via dlopen. Local users can exploit this by placing malicious libraries referenced through PATH or via the -installdir parameter. Affected components include libjutil.so in_proapsv and librocket_r.so in _dbagent...

CVE-2003-0449: Undefined Security Weakness

Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via 1 a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so inproapsv, or 2 the -installdir command line parameter, as...

SRT2003-06-13-1009.txt

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Progress Database 9.1 - Environment Variable Privilege Escalation

// source: https://www.securityfocus.com/bid/7916/info It has been reported that Progress database does not properly handle untrusted input when opening shared libraries. Specifically, the dlopen function used by several Progress utilities checks the user's PATH environment variable when includin...