CVE-2005-1624: Adobe Reader and Adobe Acrobat updater allows folder elevated privileges

Affected product: Adobe Reader (Mac OS X). Vulnerability type: information disclosure vulnerability. The connected OpenVAS entry (Adobe Reader Information Disclosure Vulnerability, Jun 2005) lists CVE-2005-1624 among related CVEs and provides limited details (no exploitation info) with CVSS base/...

USN-102-1: shar vulnerabilities

Shaun Colley discovered a buffer overflow in "shar" that was triggered by output files specified with -o with names longer than 49 characters. This could be exploited to run arbitrary attacker specified code on systems that automatically process uploaded files with shar. Ulf Harnhammar discovered...

wu-ftpd <= 2.6.2 File Globbing Denial of Service Exploit

No description provided by source. / wu-ftpd = 2.6.2 File Globbing DoS [email protected] Advisory: http://www.idefense.com/application/poi/display?id=207&type=vulnerabilities&flashstatus=true Adam Zabrocki pi3 / pi3ki31ny is credited with this discovery. / include sys/types.h include sys/socket....

newsgrab -- directory traversal vulnerability

The newsgrab script creates files by using the names provided in the newsgroup messages in a perl open call. This is done without performing any security checks to prevent a directory traversal. A specially crafted newsgroup message could cause newsgrab to drop an attachment anywhere on the file...

Solaris 9 (x86) : 114193-36

SunOS 5.9x86: wbem Patch. Date this patch was last updated by Sun : Aug/01/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation

Venustech AD-Lab www.venustech.com.cn Security Advisory Advisory: ADLAB-04003Linux 2.6. Kernel Capability LSM Module Local Privilege Elevation Authors: [email protected] Release: 09/12/04 Class: Design Error Remote: No, local Vulnerable: Linux kernel 2.6. Linux kernel 2.5.72-lsm1...

wget -- multiple vulnerabilities

Jan Minar reports that there exists multiple vulnerabilities in wget: Wget erroneously thinks that the current directory is a fair game, and will happily write in any file in and below it. Malicious HTTP response or malicious HTML file can redirect wget to a file that is vital to the system, and...

hpsockd buffer overflow

No description provided...

[SA13234] IBM WebSphere Commerce Customer Information Disclosure

TITLE: IBM WebSphere Commerce Customer Information Disclosure SECUNIA ADVISORY ID: SA13234 VERIFY ADVISORY: http://secunia.com/advisories/13234/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IBM WebSphere Commerce 5.x...

Encrypt all passwords stored on the file system

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-2146. panel Passwords are not encrypted in confluence-mail.cfg.xml nor in confluence.cfg.xml; they should be. Resolve an...

Encrypt all passwords stored on the file system

Passwords are not encrypted in confluence-mail.cfg.xml nor in confluence.cfg.xml; they should be. Resolve an encryption scheme for anything requiring security stored on the file system...

[SA13143] RealVNC Multiple Connections Denial of Service Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

HP-UX Serviceguard privilege escalation

No description provided...

RKDetect - behaviour based rootkit detection utility

Rkdetect is a little anomaly detection tool which can find services hidden by generic Windows rootkits like Hacker Defender. Tool very simply. It enumerates services on remote computer through WMI user level and Services Control Manager kernel level, compare result and display difference. In this...

Solaris 9 (x86) : 117172-17

SunOS 5.9x86: Kernel Patch. Date this patch was last updated by Sun : Jan/24/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Mac OS X < 10.5.4 Multiple Vulnerabilities

Binary data 4564.prm...

Solaris 2.5.1 (sparc) : 104266-02

SunOS 5.5.1: inetd patch. Date this patch was last updated by Sun : Jun/10/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 8 (x86) : 114674-01

SunOS 5.8x86: /usr/sbin/wall patch. Date this patch was last updated by Sun : Apr/16/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 2.5.1 (x86) : 106906-01

SunOS 5.5.1x86: apropos/catman/man/whatis patch. Date this patch was last updated by Sun : Jan/04/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 111840-01

SunOS 5.5.1: Buffer overflow in whodo via $TZ. Date this patch was last updated by Sun : Aug/15/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...