DEBIAN-CVE-2007-2444

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

Local SID/Name translation bug can result

Description When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal security stack may result in a transition to the root user id rather than the non-root user. The user is then able to temporarily issue SMB/CIFS protocol...

samba -- multiple vulnerabilities

The Samba Team reports: A bug in the local SID/Name translation routines may potentially result in a user being able to issue SMB/CIFS protocol operations as root. When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal...

Open Translation Engine (OTE) 0.7.8 (header.php ote_home) RFI Vuln

No description provided by source. Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/header.php?otehome=Shell Greetz To...

ote-fri.txt

Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/header.php?otehome=Shell Greetz To: Tryag-Team...

Open Translation Engine (OTE) 0.7.8 - header.php?ote_home Remote File Inclusion

Open Translation Engine OTE 0.7.8 - header.php?otehome Remote File Inclusion Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc...

Open Translation Engine (OTE) 0.7.8 - 'header.php?ote_home' Remote File Inclusion

Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/header.php?otehome=Shell Greetz To: Tryag-Team ..... milw0rm.com...

Open Translation Engine (OTE) 0.7.8 (header.php ote_home) RFI Vuln

Exploit for unknown platform in category web applications...

phpMyNewsletter 0.6.10 (customize.php l) RFI Vulnerability:

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ? $langfile = $l; include $l; ? ---- /include/customize.php ---- Exploit : °°°°°°°°°...

phpmynewsletter-rfi.txt

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Exploit : °°°°°°°°°...

phpMyNewsletter 0.6.10 - customize.php Remote File Inclusion

phpMyNewsletter 0.6.10 - customize.php Remote File Inclusion Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Explo...

phpMyNewsletter 0.6.10 - 'customize.php' Remote File Inclusion

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Exploit : °°°°°°°°°...

phpMyNewsletter 0.6.10 (customize.php l) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== phpMyNewsletter 0.6.10 customize.php l RFI Vulnerability ========================================================== Product : phpMyNewsletter Tested version : 0.6.10 Website :...

Make anonymiser more strict about the translation of values

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-12420. panel the anonymiser replaces letter and number characters in string values during xml backup. A more strict anonymiser would replace...

Fedora Core 6 : gnucash-2.0.5-1.fc6 (2007-256)

This updates GnuCash to version 2.0.5, the latest upstream release. Major changes in this release include; o Fix some strings not being translated. o Use guiles native sort and record. o Adjust how payment dialog resizes. o Don't abort when F::Q fails to return a quote. o Change Russian Ruble fro...

DEBIAN-CVE-2007-0404

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...

Fedora Core 5 : squirrelmail-1.4.7-2.fc5 (2006-788)

Many fixes here. Please report any regressions to Red Hat Bugzilla. - 1.4.7 with CVE-2006-3174 197369 - Move sqspellconfig.php to /etc and mark it %%confignoreplace 192236 - Reduce patch for body text 194457 - Better JP translation for 'Check mail' 196117 - Japanese zenkaku subject conversion...

Moderate squirrelmail security update

1.4.8-2.1 - remove banners 1.4.8-2 - more Japanese filename fixes 195639 1.4.8-1 - 1.4.8 release with CVE-2006-4019 and upstream bug fixes 1.4.7-5 - More JP translation updates 194598 1.4.7-4 - Fix fatal typo in configlocal.php 198306 1.4.7-2 - Move sqspellconfig.php to /etc and mark it...

security flaw

The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...

How to access blocked sites-bug warning-the black bar safety net

The following methods can also access other blocked website,, so please privately transmitted, is after all public, the more the more dangerous, after providing these services the site also been blocked, the more harm than good. 1, recommended method: use the P2P CDN network access Coral is a P2P...