CVE-2008-3528

The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service temporar...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0612 Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

iDefense Security Advisory 06.11.08: Multiple Vendor X Server MIT-SHM Extension Information Disclosure Vulnerability

iDefense Security Advisory 06.11.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 11, 2008 I. BACKGROUND The X Window System is a graphical windowing system based on a client/server model. More information about about The X Window system is available at the following link...

Yuhhu 2008 SuperStar - board SQL Injection

Yuhhu 2008 SuperStar - board SQL Injection ."; $bul=pregmatch$ara,$tuttum,$rmx; $huseyin=strreplace"class="linkbeyaz"","",$rmx; echo $site.""; echo $huseyin0; ? author : Dj Remix milw0rm.com 2008-06-10...

[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01393763 Version: 1 HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

RHEL 4 : autofs5 (RHSA-2007:1177)

Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...

CVE-2007-6452

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

Cross site scripting

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-6452

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-6452

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit GWT before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2007-6312

CVE-2007-6312 is an XSS vulnerability in the login page of Websense’s Web Reporting Tools portal (Websense Enterprise/Web Security Suite 6.3). The issue arises because the username field is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML via that input. Affect...

CVE-2007-6312

Cross-site scripting XSS vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field...

Websense Reporting Tools WsCgiLogin.exe username Parameter XSS

The remote host is running Websense, a commercial suite of web filtering products. The remote instance of Websense fails to sanitize user input to the 'UserName' parameter of the 'Websense/cgi-bin/WsCgiLogin.exe' script before using it to generate dynamic content. An unauthenticated remote attack...

runcms-overwrite.txt

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

Ubuntu 6.06 LTS / 6.10 / 7.04 : moin vulnerabilities (USN-458-1)

A flaw was discovered in MoinMoin's error reporting when using the AttachFile action. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication information for the domain where...

Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-321-1)

Jean-David Maillefer discovered a format string bug in the dateformat function's error reporting. By calling the function with invalid arguments, an authenticated user could exploit this to crash the server. Note that Tenable Network Security has extracted the preceding description block directly...

CVE-2004-2748

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message...

CVE-2004-2748

The vulnerability CVE-2004-2748 affects NetIQ WebTrends Reporting Center Enterprise Edition 6.1a, specifically viewreport.pl. The root cause is an invalid profileid parameter that causes an error message to leak the installation pathname, enabling remote attackers to determine the installation pa...

[Full-disclosure] Local Privilege Escalation in Norton AntiVirus for Mac

Text from URL: http://blog.carrel.org/2007/11/security-advisory-norton-antivirus-for.html == Synopsis == Symantec's Norton AntiVirus for Macintosh NAV contains a vulnerability that can lead to local privilege escalation from group admin to root the super-user without any of the usual password...