7852 matches found
Intel wireless service s24evmon.exe confidential information disclosure.
S24EvMon.exe is a service which is part at least of the Intel PROset/Wireless software. This application is provided by Intel in order to support intel Wireless Devices based on Spectrum 24 chipsets. This service uses a shared memory section which is created without the proper security descriptor...
[SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1032-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 12th, 2006 http://www.debian.org/security/faq -...
DSA-1032-1 zope-cmfplone - programming error
Bulletin has no description...
Microsoft Windows Shell COM Object Remote Code Execution Vulnerability
Description Microsoft Windows Shell is prone to a remote code-execution vulnerability. This issue is due to a flaw in its handling of remote COM objects. Remote attackers may exploit this issue to execute arbitrary machine code in the context of the targeted user. This may facilitate the remote...
OPIE -- arbitrary password change
Problem Description The opiepasswd1 program uses getlogin2 to identify the user calling opiepasswd1. In some circumstances getlogin2 will return "root" even when running as an unprivileged user. This causes opiepasswd1 to allow an unpriviled user to configure OPIE authentication for the root user...
opie one time password system privilege escalation
Under some conditions unprivileged user can be validated as 'root'...
SCO Unixware 7.1.3 - 'ptrace' Local Privilege Escalation
/ SCO Unixware 7.1.3 ptrace local root exploit ============================================ SCO Unixware 7.1.3 kernel allows unprivledged users to debug binaries. The condition can be exploited by an attacker when he has execute permissions to a file which has the suid bit set. Example. $ uname -...
Ubuntu 4.10 / 5.04 : postgresql vulnerabilities (USN-118-1)
It was discovered that unprivileged users were allowed to call internal character conversion functions. However, since these functions were not designed to be safe against malicious choices of argument values, this could potentially be exploited to execute arbitrary code with the privileges of th...
Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)
Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysaslcanonuser function could lead to a missing termination of an user name string. This vulnerability could allow remote, attacker-supplied...
[SA18421] Sun Solaris Unspecified Privilege Escalation and Denial of Service
TITLE: Sun Solaris Unspecified Privilege Escalation and Denial of Service SECUNIA ADVISORY ID: SA18421 VERIFY ADVISORY: http://secunia.com/advisories/18421/ CRITICAL: Less critical IMPACT: Privilege escalation, DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/...
Sygate Protection Agent protection bypass
Unprivileged user can disable protection...
Microsoft Windows XP20002003 - CreateRemoteThread Local Denial of Service
Microsoft Windows XP20002003 - CreateRemoteThread Local Denial of Service // source: https://www.securityfocus.com/bid/15671/info Microsoft Windows is prone to a local denial of service vulnerability. This issue can allow an attacker to trigger a system wide denial of service condition or termina...
Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service
// source: https://www.securityfocus.com/bid/15671/info Microsoft Windows is prone to a local denial of service vulnerability. This issue can allow an attacker to trigger a system wide denial of service condition or terminate arbitrary processes. Reports indicate that a process can call the...
Oracle XSQL Sample Application Vulnerability
One of the sample applications that comes with the Oracle XSQL Servlet allows an attacker to make arbitrary queries to the Oracle database under an unprivileged account. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright ...
Oracle XSQL Sample Application Vulnerability
One of the sample applications that comes with the Oracle XSQL Servlet allows an attacker to make arbitrary queries to the Oracle database under an unprivileged account. Whilst not allowing an attacker to delete or modify database contents, this flaw can be used to enumerate database users and vi...
[SA16955] Sun Solaris Xsun and Xprt Privilege Escalation Vulnerability
TITLE: Sun Solaris Xsun and Xprt Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA16955 VERIFY ADVISORY: http://secunia.com/advisories/16955/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ Sun Solari...
Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion
Apple Mac OSX 10.4 - dsidentity Directory Services Account Creation and Deletion source: https://www.securityfocus.com/bid/14630/info A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts. This issue was originally described...
[NEWS] Default Configuration Information Disclosure in Lotus Domino (Including Password Hashes)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...