[SA14153] Avaya CMS UDP End Point Handling Denial of Service

TITLE: Avaya CMS UDP End Point Handling Denial of Service SECUNIA ADVISORY ID: SA14153 VERIFY ADVISORY: http://secunia.com/advisories/14153/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Avaya Call Management System CMS http://secunia.com/product/4615/ DESCRIPTION: Avay...

Microsoft Internet Explorer - .ANI Downloader (MS05-002)

Microsoft Internet Explorer - .ANI Downloader MS05-002 / Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002...

Solaris 8 (x86) : 113750-02

SunOS 5.8x86: User Manager CLI Patch. Date this patch was last updated by Sun : Dec/22/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

[VulnWatch] Secunia Research: My Firewall Plus Privilege Escalation Vulnerability

====================================================================== Secunia Research 21/12/2004 - My Firewall Plus Privilege Escalation Vulnerability - ====================================================================== Table of Contents Affected...

Linux Kernel 2.6.x < 2.6.7-rc3 - 'sys_chown()' Privilege Escalation

Linux Kernel 2.6.x Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4 CAN-2004-0497. "Basically, you can change the group of a file you don't own, but not of an SGID executable." -- Solar Designer 0dd On Linux...

[SA13330] IberAgents Clear Text User Credential Disclosure

TITLE: IberAgents Clear Text User Credential Disclosure SECUNIA ADVISORY ID: SA13330 VERIFY ADVISORY: http://secunia.com/advisories/13330/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IberAgents 1.x http://secunia.com/product/4336/ DESCRIPTION: A...

[SA12772] Crystal Reports JPEG Processing Buffer Overflow Vulnerability

TITLE: Crystal Reports JPEG Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12772 VERIFY ADVISORY: http://secunia.com/advisories/12772/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Crystal Reports 9 http://secunia.com/product/2254/ Crystal Reports 1...

[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise

-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...

Debian DSA-381-1 : mysql - buffer overflow

MySQL, a popular relational database system, contains a buffer overflow condition which could be exploited by a user who has permission to execute 'ALTER TABLE' commands on the tables in the 'mysql' database. If successfully exploited, this vulnerability could allow the attacker to execute...

os-x/PPC add inetd backdoor 222 bytes

No description provided by source. / PPC OS X / Darwin Shellcode by B-r00t. 2003. open; write; close; execve; exit; See ASM below. 222 Bytes! / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd\x7d\x48\x02\xa6\x3b\xea\x01\x70" "\x39\x60\x01\x70\x39\x1f\xff\x1b\x7c\xa8\x29\xae\x39\x1f\xff\x65"...

linux/x86 add user t00r ENCRYPT 116 bytes

linux/x86 add user t00r ENCRYPT 116 bytes. Shellcode exploit for linx86 platform / !!!!!! ANTI IDS SHELLCODE !!!!!! [email protected] 0x14abril0x7d2 !!!!! ENCRIPTADA !!!!! 116 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd !!!!! ENCRIPTADA !!!!! Para mas informacion Descargue...

Solaris 8 (x86) : 110904-08

SunOS 5.8x86: edit, ex, vedit, vi and view patch. Date this patch was last updated by Sun : Sep/16/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

[NT] DiamondCS Process Guard Can Be Disabled by Direct Service Table Restoration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

RHEL 2.1 : wget (RHSA-2002:256)

The wget packages shipped with Red Hat Linux Advanced Server 2.1 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 09 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fix...

CVE-2004-0133

The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device...

IBM EGatherer 2.0 - ActiveX Control Dangerous Method

IBM EGatherer 2.0 - ActiveX Control Dangerous Method source: https://www.securityfocus.com/bid/10562/info It is reported that the IBM eGatherer ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods ma...

IRIX 6.5.24 rpc.mountd infinte loop

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX 6.5.24 rpc.mountd infinte loop Number: 20040503-01-P Date: May 17, 2004 Reference: SGI BUG 914056 Fixed in: Patch 5602 for 6.5.24m SGI provides this information freely to the SGI user community for its consideration,...

eMule 0.42e Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================ eMule 0.42e Remote Denial of Service Exploit ============================================ !/usr/bin/perl system"cls"; Emule 0.42e Remote Denial Of Service Exploit Coded by Rafel Ivgi, The-Insider usage...

RE: [Full-Disclosure] EEYE: Symantec Multiple Firewall TCP Options Denial of Service

On 04/23/2004: eEye Digital Security posted: eE"Derek Soeder" [email protected] Sent by: [email protected] 04/23/2004 01:36 PM Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of...

Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration

source: https://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the VBScript LoadPicture method. Exploitation of the weakness may assist ...