Improper access control

Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read 1 template aka .tmpl files, 2 other custom...

CVE-2012-2206

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...

CVE-2011-5098

chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative privileges for creating admin clients, which allows remote authenticated users to bypass intended access restrictions by leveraging read permission for the...

FreeBSD UIPC socket stack overflow-vulnerability warning-the black bar safety net

!/ bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley a, 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details: http://www.securityfocus.com/archive/1/519864/30/0/threaded this P...

EMC NetWorker 7.6 sp3 - Denial of Service

EMC NetWorker 7.6 sp3 - Denial of Service Luigi Auriemma Application: EMC NetWorker Legato http://www.emc.com/backup-and-recovery/networker/networker.htm Versions: = 7.6 sp3 7.6.3.2 Build 860 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bug: invalid read access Exploitation: remote Date: 14 Mar...

EMC NetWorker 7.6 sp3 - Denial of Service

Luigi Auriemma Application: EMC NetWorker Legato http://www.emc.com/backup-and-recovery/networker/networker.htm Versions: = 7.6 sp3 7.6.3.2 Build 860 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bug: invalid read access Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail:...

XML::Atom Perl module limitations bypass

It's possible to obtain read access to limited resources...

[SECURITY] [DSA 2424-1] libxml-atom-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2424-1 [email protected] http://www.debian.org/security/ Florian Weimer March 04, 2012 http://www.debian.org/security/faq -...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : tomcat6 vulnerabilities (USN-1359-1)

It was discovered that Tomcat incorrectly performed certain caching and recycling operations. A remote attacker could use this flaw to obtain read access to IP address and HTTP header information in certain cases. This issue only applied to Ubuntu 11.10. CVE-2011-3375 It was discovered that Tomca...

Design/Logic Flaw

Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by readin...

CVE-2011-3375

CVE-2011-3375 affects Apache Tomcat 6.0.30–6.0.33 and 7.x before 7.0.22. The root cause is improper caching/recycling of request objects, which can allow remote attackers to read IP addresses and HTTP header information by reading TCP data. The impact is information disclosure of request metadata...

FreeBSD UIPC socket heap overflow proof-of-concept

Exploit for freebsd platform in category dos / poc !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...

Beckhoff TwinCAT 2.11.0.2004 - Denial of Service

Beckhoff TwinCAT 2.11.0.2004 - Denial of Service Luigi Auriemma Application: Beckhoff TwinCAT http://www.beckhoff.de/twincat/ Versions: = 2.11.0.2004 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.or...

Rockwell RSLogix 19 - Denial of Service

Rockwell RSLogix 19 - Denial of Service Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma...

Beckhoff TwinCAT 2.11.0.2004 - Denial of Service

Luigi Auriemma Application: Beckhoff TwinCAT http://www.beckhoff.de/twincat/ Versions: = 2.11.0.2004 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

PT-2011-3665 · Libvirt · Libvirt

Name of the Vulnerable Software and Affected Versions: libvirt versions 0.8.8 through 0.9.1 Description: The issue is related to the virSecurityManagerGetPrivateData function in security/security manager.c, which incorrectly processes "security manager private data" due to a wrong argument used i...

Rockwell RSLogix Overflow Vulnerability

Overview This updated advisory is a follow-up to the Alert titled “ICS-ALERT-11-256-05A—Rockwell RSLogix Overflow Vulnerability” that was published September 13, 2011, on the Industrial Control Systems Cyber Emergency Response Team ICS-CERT web page. ICS-CERT is aware of a public report of an...

HP Discovery & Dependency Mapping Inventory information leak

public community has SNMP read access by default...

CVE-2009-5055

Open Ticket Request System OTRS before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the...

Debian Security Advisory DSA 2181-1 (subversion)

The remote host is missing an update to subversion announced via advisory DSA 2181-1. OpenVAS Vulnerability Test $Id: deb21811.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2181-1 subversion Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...