1924 matches found
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution (890047)
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution 890047 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
[SA14080] SmarterMail Attachment Upload Vulnerability
TITLE: SmarterMail Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA14080 VERIFY ADVISORY: http://secunia.com/advisories/14080/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SmarterMail http://secunia.com/product/3154/ DESCRIPTION: Soroush Dalili has...
[SA13948] TikiWiki "temp" Arbitrary Script Execution Vulnerability
TITLE: TikiWiki "temp" Arbitrary Script Execution Vulnerability SECUNIA ADVISORY ID: SA13948 VERIFY ADVISORY: http://secunia.com/advisories/13948/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: TikiWiki 1.x http://secunia.com/product/3356/ DESCRIPTION: Some...
Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service (885249)
Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service 885249 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use the Microsoft DHCP Server service. Impact of Vulnerability: Remote Code Executi...
PunBB < 1.1.2 install.php XSS
The remote version of PunBB is vulnerable to cross-site scripting flaws through 'install.php' script. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser resulting in the possible theft of authentication cookies, mis-representation of site...
[SA13331] FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability
TITLE: FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13331 VERIFY ADVISORY: http://secunia.com/advisories/13331/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeImage 3.x http://secunia.com/product/4341/...
[SA13268] Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service
TITLE: Fastream NETFile FTP/Web Server Multiple HEAD Requests Denial of Service SECUNIA ADVISORY ID: SA13268 VERIFY ADVISORY: http://secunia.com/advisories/13268/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Fastream NETFile FTP/Web Server 6.x http://secunia.com/product/2455/...
PT-2004-1962
Name of the Vulnerable Software and Affected Versions: Eset Anti-Virus versions prior to 1.020 16th September 2004 Description: The issue allows remote attackers to bypass antivirus protection by using a compressed file with both local and global headers set to zero. This technique does not preve...
[SA12853] phpCodeGenie "Simple Application Generation" Code Execution Vulnerability
TITLE: phpCodeGenie "Simple Application Generation" Code Execution Vulnerability SECUNIA ADVISORY ID: SA12853 VERIFY ADVISORY: http://secunia.com/advisories/12853/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: phpCodeGenie 3.x http://secunia.com/product/4141/...
[SA11711] Apple Remote Desktop Privilege Escalation Vulnerability
TITLE: Apple Remote Desktop Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA11711 VERIFY ADVISORY: http://secunia.com/advisories/11711/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Apple Remote Desktop 1.x http://secunia.com/product/4180/ Apple Remo...
[Full-Disclosure] STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041022-08 MoniWiki XSS vulnerability Revision 1.0 Date Published: 2004-10-22 KST Last Update: 2004-10-22 Disclosed by SSR Team [email protected] Summary ======== MoniWiki is a wiki web application used by many Korea...
Debian DSA-098-1 : libgtop - format string vulnerability and buffer overflow
Two different problems were found in libgtop-daemon : - The laboratory intexxia found a format string problem in the logging code from libgtopdaemon. There were two logging functions which are called when authorizing a client which could be exploited by a remote user. - Flavio Veloso found a buff...
Debian DSA-335-1 : mantis - incorrect permissions
mantis, a PHP/MySQL web-based bug tracking system, stores the password used to access its database in a configuration file which is world-readable. This could allow a local attacker to read the password and gain read/write access to the database. %NASLMINLEVEL 70300 C Tenable Network Security, In...
Debian DSA-409-1 : bind - denial of service
A vulnerability was discovered in BIND, a domain name server, whereby a malicious name server could return authoritative negative responses with a large TTL time-to-live value, thereby rendering a domain name unreachable. A successful attack would require that a vulnerable BIND instance submit a...
Debian DSA-259-1 : qpopper - mail user privilege escalation
Florian Heinz posted to the Bugtraq mailing list an exploit for qpopper based on a bug in the included vsnprintf implementation. The sample exploit requires a valid user account and password, and overflows a string in the popmsg function to give the user 'mail' group privileges and a shell on the...
Debian DSA-353-1 : sup - insecure temporary file
sup, a package used to maintain collections of files in identical versions across machines, fails to take appropriate security precautions when creating temporary files. A local attacker could exploit this vulnerability to overwrite arbitrary files with the privileges of the user running sup...
Debian DSA-411-1 : mpg321 - format string vulnerability
A vulnerability was discovered in mpg321, a command-line mp3 player, whereby user-supplied strings were passed to printf3 unsafely. This vulnerability could be exploited by a remote attacker to overwrite memory, and possibly execute arbitrary code. In order for this vulnerability to be exploited,...
Debian DSA-426-1 : netpbm-free - insecure temporary files
netpbm is a graphics conversion toolkit made up of a large number of single-purpose programs. Many of these programs were found to create temporary files in an insecure manner, which could allow a local attacker to overwrite files with the privileges of the user invoking a vulnerable netpbm tool...
Debian DSA-378-1 : mah-jong - buffer overflows, denial of service
Nicolas Boullis discovered two vulnerabilities in mah-jong, a network-enabled game. - CAN-2003-0705 buffer overflow This vulnerability could be exploited by a remote attacker to execute arbitrary code with the privileges of the user running the mah-jong server. - CAN-2003-0706 denial of service...
Debian DSA-352-1 : fdclone - insecure temporary directory
fdclone creates a temporary directory in /tmp as a workspace. However, if this directory already exists, the existing directory is used instead, regardless of its ownership or permissions. This would allow an attacker to gain access to fdclone's temporary files and their contents, or replace them...