6651 matches found
Mandriva Update for kernel MDKSA-2007:040 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:040 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit
No description provided by source. / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi [email protected] Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of file...
CVE-2007-6195
HP-UX vulnerability CVE-2007-6195 affects swagentd (Software Distributor) on HP-UX B.11.11 and B.11.23. The flaw is in sw_rpc_agent_init (opcode 0x04) where malformed DCE RPC arguments can trigger a buffer overflow, enabling remote arbitrary code execution or a Denial of Service. HP released fixe...
Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow
Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow REM metasploit one, add a user 'su' with pass 'tzu' shellcode =...
MDKA-2006:065 : hal
A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:040)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The isdnpppccpresetallocstate function in drivers/isdn/isdnppp.c in the Linux 2.4 kernel before 2.4.34-rc4, as well as the 2.6 kernel, does not call the inittimer function for the ISDN PPP CCP reset state timer, which ha...
CVE-2006-3919
SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the 1 newsid, 2 tid, and 3 pageid parameters...
CVE-2006-3919
CVE-2006-3919 concerns a SQL injection in SD Studio CMS, specifically in index.php. The vulnerability allows remote attackers to inject arbitrary SQL through the parameters (1) news_id, (2) tid, and (3) page_id. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low attack complexity, n...
CVE-2006-3919
SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the 1 newsid, 2 tid, and 3 pageid parameters...
[SA21207] SD Studio CMS SQL Injection Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
HP-UX PHCO_23483 : HPSBUX0102-143 Sec. Vulnerability in SD-UX (Rev.02)
s700800 11.04 VVOS SD-UX Cumulative Patch : Security defect in Software Distributor SD-UX. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO23483. The text itself is copyright C Hewlett-Packard Development...
CVE-2006-2288
Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...
Code injection
Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...
CVE-2006-2288
Avahi before 0.6.10 allows local users to cause a denial of service mDNS/DNS-SD service disconnect via unspecified mDNS name conflicts...
CVE-2006-2288
Avahi in versions prior to 0.6.10 is affected by CVE-2006-2288, allowing local users to trigger a denial of service by causing mDNS/DNS-SD service disconnects due to unspecified mDNS name conflicts. The available documents identify the affected product and the general impact but do not provide ex...
CVE-2005-0507
Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request...
SDtraverse.txt
..:x0n3-h4ck Italian Security Team:.. /Advisories\ / Application: SD Server Url Vendor: http://www.gdsoftware.dk/ Version: = 4.0.70 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL Email Author: [email protected] Url Author: www.x0n3-h4ck.org \ Description The SD...
CVE-2005-0507
Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request...
CVE-2005-0507
CVE-2005-0507 describes a directory traversal vulnerability in SD Server 4.0.70 and earlier that allows remote attackers to read arbitrary files via .. sequences in an HTTP request. The affected software is SD Server (versions up to and including 4.0.70); the underlying issue is improper validati...