DEBIAN-CVE-2007-2444

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

CVE-2007-2444: Improper Privilege Management

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

CVE-2007-2676: Undefined Security Weakness

PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine OTE 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the otehome parameter...

Local SID/Name translation bug can result

Description When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal security stack may result in a transition to the root user id rather than the non-root user. The user is then able to temporarily issue SMB/CIFS protocol...

samba -- multiple vulnerabilities

The Samba Team reports: A bug in the local SID/Name translation routines may potentially result in a user being able to issue SMB/CIFS protocol operations as root. When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal...

Open Translation Engine (OTE) 0.7.8 (header.php ote_home) RFI Vuln

No description provided by source. Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/header.php?otehome=Shell Greetz To...

ote-fri.txt

Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/header.php?otehome=Shell Greetz To: Tryag-Team...

Open Translation Engine (OTE) 0.7.8 (header.php ote_home) RFI Vuln

Exploit for unknown platform in category web applications...

Open Translation Engine (OTE) 0.7.8 - header.php?ote_home Remote File Inclusion

Open Translation Engine OTE 0.7.8 - header.php?otehome Remote File Inclusion Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc...

Open Translation Engine (OTE) 0.7.8 - 'header.php?ote_home' Remote File Inclusion

Open Translation Engine OTE 0.7.8 header.php otehomeRemote File Include D.Script: http://heanet.dl.sourceforge.net/sourceforge/ote/ote.0.7.8.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/header.php?otehome=Shell Greetz To: Tryag-Team ..... milw0rm.com...

phpMyNewsletter 0.6.10 (customize.php l) RFI Vulnerability:

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ? $langfile = $l; include $l; ? ---- /include/customize.php ---- Exploit : °°°°°°°°°...

phpmynewsletter-rfi.txt

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Exploit : °°°°°°°°°...

phpMyNewsletter 0.6.10 (customize.php l) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== phpMyNewsletter 0.6.10 customize.php l RFI Vulnerability ========================================================== Product : phpMyNewsletter Tested version : 0.6.10 Website :...

phpMyNewsletter 0.6.10 - customize.php Remote File Inclusion

phpMyNewsletter 0.6.10 - customize.php Remote File Inclusion Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Explo...

phpMyNewsletter 0.6.10 - 'customize.php' Remote File Inclusion

Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ---- /include/customize.php ---- Exploit : °°°°°°°°°...

Make anonymiser more strict about the translation of values

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-12420. panel the anonymiser replaces letter and number characters in string values during xml backup. A more strict anonymiser would replace...

Fedora Core 6 : gnucash-2.0.5-1.fc6 (2007-256)

This updates GnuCash to version 2.0.5, the latest upstream release. Major changes in this release include; o Fix some strings not being translated. o Use guiles native sort and record. o Adjust how payment dialog resizes. o Don't abort when F::Q fails to return a quote. o Change Russian Ruble fro...

DEBIAN-CVE-2007-0404

bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...

Fedora Core 5 : squirrelmail-1.4.7-2.fc5 (2006-788)

Many fixes here. Please report any regressions to Red Hat Bugzilla. - 1.4.7 with CVE-2006-3174 197369 - Move sqspellconfig.php to /etc and mark it %%confignoreplace 192236 - Reduce patch for body text 194457 - Better JP translation for 'Check mail' 196117 - Japanese zenkaku subject conversion...

Moderate squirrelmail security update

1.4.8-2.1 - remove banners 1.4.8-2 - more Japanese filename fixes 195639 1.4.8-1 - 1.4.8 release with CVE-2006-4019 and upstream bug fixes 1.4.7-5 - More JP translation updates 194598 1.4.7-4 - Fix fatal typo in configlocal.php 198306 1.4.7-2 - Move sqspellconfig.php to /etc and mark it...