DEBIAN-CVE-2006-3324

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine ioquake3 before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory fshomepath cvar via a long string of filenames, as contained in the neededpaks buffer...

[security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00657001 Version: 1 HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager xstm, cstm, stm Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acte...

netPanzer 0.8 rev 952 (frameNum) Server Terminiation Exploit

No description provided by source. netPanzer 0.8 rev 952 frameNum Server Terminiation Exploit http://www.milw0rm.com/sploits/05232006-panza.zip milw0rm.com 2006-05-23...

Format string

Format string vulnerability in the raydiumlog function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydiumconsolelineadd...

CVE-2006-2410

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...

CVE-2006-2408

Raydium is affected by multiple buffer overflows prior to SVN revision 310. The vulnerability allows remote attackers to execute arbitrary code by sending a large packet, exploiting two code paths: raydium_log in log.c and raydium_console_line_add in console.c, potentially triggered by a long pla...

CVE-2006-2409

CVE-2006-2409 affects Raydium prior to SVN revision 310, where a format string vulnerability in the raydium_log function (console.c) can allow local users to execute arbitrary code through format specifiers in the format parameter, not properly handled in a call to raydium_console_line_add. Affec...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

TWiki revision control shell command injection

Added: 04/06/2006 CVE: CVE-2005-2877 BID: 14834 OSVDB: 19403 Background TWiki is a web-based collaboration platform written in PERL. Problem The revision control function in TWiki does not sufficiently check the rev parameter before using it in a shell command call. This allows remote attackers t...

Stack overflow

Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service application crash and possibly execute code via long "revision attributes"...

CVE-2006-0597

Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service application crash and possibly execute code via long "revision attributes"...

CVE-2006-0597

Removed by vendor...

CVE-2006-0597: Undefined Security Weakness

Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service application crash and possibly execute code via long "revision attributes"...

FreeBSD-SA-06:01.texindex

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:01.texindex Security Advisory The FreeBSD Project Topic: Texindex temporary file privilege escalation Category: contrib Module: texinfo Announced: 2006-01-11...

planetBackdoor.txt

Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...

TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution

TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution source: https://www.securityfocus.com/bid/14960/info A remote command execution vulnerability affects the application. The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a comman...

Solaris 10 (sparc) : 118666-86 (deprecated)

JavaSE 5.0: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 This plugin has been deprecated and either replaced with individual 118666 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[security bulletin] SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01219 REVISION: 0 SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: 15 August 2005 POTENTIAL SECURITY...