85 matches found
CVE-2009-0290: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the g4path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathnam...
CVE-2008-2812
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...
PT-2008-4251 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25.10 Description: The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly gain privileges. This is achieved through vectors involving NULL pointer...
1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ===================================================================== 1024 CMS 0.7 download.php item Remote File Disclosure Vulnerability ===================================================================== '/ -.-...
MS08-068 Microsoft Windows SMB Relay Code Execution
This module will relay SMB authentication requests to another host, gaining access to an authenticated SMB session if successful. If the connecting user is an administrator and network logins are allowed to the target machine, this module will execute an arbitrary payload. To exploit this, the...