1792 matches found
RHEL 3 / 4 / 5 : quagga (RHSA-2007:0389)
An updated quagga package that fixes a security bug is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga is a TCP/IP based routing software suite. An out of bounds memory read flaw was...
CentOS 3 / 4 / 5 : quagga (CESA-2007:0389)
An updated quagga package that fixes a security bug is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga is a TCP/IP based routing software suite. An out of bounds memory read flaw was...
RHEL 5 : evolution-data-server (RHSA-2007:0344)
Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wor...
CentOS 5 : evolution-data-server (CESA-2007:0344)
Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wor...
CentOS 3 / 4 : evolution (CESA-2007:0353)
Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw wa...
RHEL 3 / 4 : evolution (RHSA-2007:0353)
Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw wa...
[SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Local SID/Name translation bug can result == in user privilege elevation == CVE ID: CVE-2007-2444 == == Versions: Samba 3.0.23d - 3.0.25pre2 inclusive == == Summary: A bug in th...
0irc-client v1345 build20060823 Denial of Service Exploit
No description provided by source. / 0irc-client v1345 build 20060823 DoS Exploit By DiGitalX [email protected] Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am Description: 0irc-client suffers from a NULL pointer derefrencing bug. / define WIN32LEANANDMEAN include winsock2.h...
[Full-disclosure] Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability
Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Successfully Tested on Windows Vista Ultimate Greetings fly out to Alex,wtfomg,Thierry,Andi and Blackzero Description Windows Mail is the default Mail Client of Microsoft Windows Vista. Vulnerability Remote Code...
Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
Hi, Access to http://somesite/servlet/Spy should be restricted. But generally database or system administrators ignore the hardening of Oracle apllications or database. I have noticed XSS bug in Dynamic Monitoring services on Oracle-Application-Server-10g/10.1.2.0.0...
metaforum-upload.txt
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80...
MetaForum <= 0.513 Beta - Remote file upload Vulnerability
|Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php file on the server. During the upload, the MIME type of the file is the only verified parameter. The extention isn't. This enables a attacker to fake the MIME...
MetaForum <= 0.513 Beta Remote File Upload Exploit
Exploit for unknown platform in category web applications ================================================== MetaForum = 0.513 Beta Remote File Upload Exploit ================================================== ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta...
MetaForum <= 0.513 Beta Remote File Upload Exploit
No description provided by source. ?php /---------------------------------------------------------\ MetaForum = 0.513 Beta - Remote file upload Vulnerability |Description:| A security bug has been discovered in MetaForum 0.513 Beta. This bug can be used by an attacker to upload a malicious php...
MetaForum 0.513 Beta - Arbitrary File Upload
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80, $eno, $estr, 30; i...
Talking about virtual communities, security bug found and exploit-vulnerability warning-the black bar safety net
Author:Wang gang This article published in the hacker Handbook magazine http://www.nohack.cn that the copyright of all, reproduced please indicate the source. Personal website: www.itheroes.cn Now on the network Forum and community there are many, the Forum, the vast majority are using some free ...
WebCalendar 0.9.45 - 'includedir' Remote File Inclusion
|-------------------------------------------------------------------------------| | | | WebCalendar v0.9.45 13 Dec 2004 login.php Remote File include | | | | Script : WebCalendar | | Version : v0.9.45 13 Dec 2004 | | Authord : Drackanz | | Contact : Drackanz at gmail com | | Vendor :...
vcard26-xss.txt
Discovered By : Hasadya Raed Contact : [email protected] Script: vCard 2.6 c2002 Bug in : create.php Exploit : http://www.victim.com/path/create.php?uploaded="alert1; --...
Magic CMS 4.2.747 - 'mysave.php' Remote File Inclusion
'/ -.- ---------------------oOO------OOo--------------------- | Magic CMS v4.2.747 mysave.php Remote File Inclusion | | works only with registerglobals = on | | coded by DNX | --------------------------------------------------------- ! Discovered: DNX ! Vendor: www.geo-soft.net/de-ch/ ! Detected:...
MOPB-03-2007:PHP Variable Destructor Deep Recursion Stack Overflow
Summary The last vulnerability for today is similar to the second one. This time the bug is however a deep recursion bug in the Zend Engine variable destruction. User input is parsed in an iterative way which allows the creation of very deeply nested array structures from user input. However when...