Design/Logic Flaw

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...

CVE-2006-0228

CVE-2006-0228 involves the RBAC helper in grsecurity prior to 2.1.8, where the admin role can inadvertently remain active after the admin creates a service and exits the shell without unauthenticating. This causes the service to restart with the admin role still active, giving elevated privileges...

Mandrake Linux Security Advisory : php (MDKSA-2005:213)

"A number of vulnerabilities were discovered in PHP : An issue with fopenwrappers.c would not properly restrict access to other directories when the openbasedir directive included a trailing slash CVE-2005-3054 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Microsoft Windows - Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities

Microsoft Windows - Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities source: https://www.securityfocus.com/bid/16167/info Microsoft Windows WMF graphics-rendering engine is affected by multiple memory-corruption vulnerabilities. These issues affect the 'ExtCreateRegion' and...

Microsoft Windows - Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/16167/info Microsoft Windows WMF graphics-rendering engine is affected by multiple memory-corruption vulnerabilities. These issues affect the 'ExtCreateRegion' and 'ExtEscape' functions. These problems present themselves when a user views a malicious...

CVE-2005-4624

The mjoin function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service memory exhaustion that triggers a daemon restart via a large number of requests to join a "charmed channel" such as PTnet, PTnoticias and .log, which causes ircd to open the channel eve...

Microsoft IIS ISAPI RSA WebAgent Redirect Overflow

This module exploits a stack buffer overflow in the SecurID Web Agent for IIS. This ISAPI filter runs in-process with inetinfo.exe, any attempt to exploit this flaw will result in the termination and potential restart of the IIS service. This module requires Metasploit:...

Unreal Tournament 2004 "secure" Overflow (Linux)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

Unreal Tournament 2004 "secure" Overflow (Win32)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

The black ice of the campus to pick up broilers Edition-vulnerability warning-the black bar safety net

The famous black ice firewall, I believe you warrior Diamondback they have heard of it! It is by virtue of its superior anti-black abilities and become dear Internet users friends travel home, surf the Internet essential good product. （As if in to it for advertising。。。。 Oh that we today refer to...

Hack how to implement network overload attack completely resolves-bug warning-the black bar safety net

In network overload attack, a shared resource or service due to the need to process large amounts of request that cannot be met from other users of the arrival of the request. For example, a user generates a lot of processes, then other users cannot run own processes. If a user uses a lot of...

RHEL 2.1 : openssl (RHSA-2005:829)

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The OpenSSL toolkit implements Secure Sockets Layer SSL v2/v3,...

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow (Metasploit)

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

SUSE-SA:2005:053: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:053 squid. This update of the Squid web-proxy fixes two remotely exploitable denial of service vulnerabilities. One can be triggered by aborting a request CVE-2005-2794 due to a faulty assertion. The other one occurs in...

[SECURITY] [DSA 828-1] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 828-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

Nokia Symbian 60 (Bluetooth Nickname) Remote Restart (update)

Exploit for hardware platform in category dos / poc ============================================================= Nokia Symbian 60 Bluetooth Nickname Remote Restart update ============================================================= / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit wi...

Nokia Symbian 60 - BlueTooth Nickname Remote Restart (2)

Nokia Symbian 60 - BlueTooth Nickname Remote Restart 2 / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth nickname, if any one...

Nokia Symbian 60 - 'BlueTooth Nickname' Remote Restart (2)

/ Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth nickname, if any one search and find your nickname his mobile will restart . -...

Debian DSA-800-1 : pcre3 - integer overflow

An integer overflow with subsequent buffer overflow has been detected in PCRE, the Perl Compatible Regular Expressions library, which allows an attacker to execute arbitrary code. Since several packages link dynamically to this library you are advised to restart the corresponding services or...

Debian DSA-767-1 : ekg - integer overflows

Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...