SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook

SEC Consult Security Advisory 20051211-0 ========================================================================== title: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook program: Horde Application Framework + Modules vulnerable version:...

nbSMTP: Format string vulnerability

Background nbSMTP is an SMTP client suitable to run in chroot jails, in embedded systems, laptops and workstations. Description Niels Heinen discovered a format string vulnerability. Impact An attacker can setup a malicious SMTP server and exploit this vulnerability to execute arbitrary code with...

GLSA-200507-29 : pstotext: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200507-29 pstotext: Remote execution of arbitrary code Max Vozeler reported that pstotext calls the GhostScript interpreter on untrusted PostScript files without specifying the -dSAFER option. Impact : An attacker could craft a...

CVE-2002-2027

The CVE-2002-2027 entry concerns DOOW (Database of Our Owlish Wisdom) versions 0.1 through 0.2.1, where insufficient verification of user permissions enables remote attackers to perform unauthorized activities. The available documents confirm the affected product and the underlying issue (permiss...

GLSA-200505-03 : Ethereal: Numerous vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-03 Ethereal: Numerous vulnerabilities There are numerous vulnerabilities in versions of Ethereal prior to 0.10.11, including: The ANSI A and DHCP dissectors are vulnerable to format string vulnerabilities. The DISTCC, FCELS...

vixie_crontab_readfiles-exploit_and_advisory.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: vixie-cron Author: Karol Wiêsek Date: Mar 21, 2005 Issue: crontab allows any user to read another users crontabs Description: Crontab is used to create special files used by cron to execute commands at specified dates and times. Details:...

GLSA-200503-23 : rxvt-unicode: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200503-23 rxvt-unicode: Buffer overflow Rob Holland of the Gentoo Linux Security Audit Team discovered that rxvt-unicode fails to properly check input length. Impact : Successful exploitation would allow an attacker to execute...

rxvt-unicode: Buffer overflow

Background rxvt-unicode is a clone of the well known terminal emulator rxvt. Description Rob Holland of the Gentoo Linux Security Audit Team discovered that rxvt-unicode fails to properly check input length. Impact Successful exploitation would allow an attacker to execute arbitrary code with the...

CVE-2004-1526

Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator...

mit-krb5: Heap overflow in libkadm5srv

Background MIT krb5 is the free implementation of the Kerberos network authentication protocol by the Massachusetts Institute of Technology. Description The MIT Kerberos 5 administration library libkadm5srv contains a heap overflow in the code handling password changing. Impact Under specific...

XSA-2004-7: stack overflow in AIFF demultiplexer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-7 Summary: A stack buffer overflow vulnerability in the AIFF demultiplexer has been found by Ariel Berkman and was reported to the xine team by D. J. Bernstein. This can b...

iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability

libtiff STRIPOFFSETS Integer Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=173&type=vulnerabilities December 21, 2004 I. BACKGROUND libtiff provides support for the Tag Image File Format TIFF, a widely used format for storing image data. Mo...

[ GLSA 200411-17 ] mtink: Insecure tempfile handling

Gentoo Linux Security Advisory GLSA 200411-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

zip: Path name buffer overflow

Background zip is a compression and file packaging utility. Description zip does not check the resulting path length when doing recursive folder compression. Impact An attacker could exploit this by enticing another user or web application to create an archive including a specially-crafted path...

Debian DSA-303-1 : mysql - privilege escalation

CAN-2003-0073: The mysql package contains a bug whereby dynamically allocated memory is freed more than once, which could be deliberately triggered by an attacker to cause a crash, resulting in a denial of service condition. In order to exploit this vulnerability, a valid username and password...

XSA-2004-5: heap overflow in DVD subpicture decoder

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xine security announcement ========================== Announcement-ID: XSA-2004-5 Summary: A heap overflow has been found in the DVD subpicture decoder of xine-lib. This can be used for a remote heap overflow exploit, which can, on some systems, lead ...

CDRDAO Local Root Exploit

Exploit for linux platform in category local exploits ========================= CDRDAO Local Root Exploit ========================= !/bin/sh DIR=pwd echo "" echo "cdrdao local root exploit - gr doesn't protect you this time" echo "Karol Wi?sek " echo "" sleep 2 umask 000 echo -n " Checking if...

[Full-Disclosure] Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i

http://www.red-database-security.com/advisory/advisory200409033.htm RDS200409032 - Red-Database-Security GmbH Research Advisory Name Buffer Overflow in DBMSSYSTEM.KSDWRT in Oracle8i - 9i Systems Affected Oracle 8i - Oracle9i all platforms Severity Medium Risk Category Buffer Overflow/Denial of...

GLSA-200407-23 : SoX: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-23 SoX: Multiple buffer overflows Ulf Harnhammar discovered two buffer overflows in the sox and play commands when handling WAV files with specially crafted header fields. Impact : By enticing a user to play or convert a...

GLSA-200408-01 : MPlayer: GUI filename handling overflow

The remote host is affected by the vulnerability described in GLSA-200408-01 MPlayer: GUI filename handling overflow The MPlayer GUI code contains several buffer overflow vulnerabilities, and at least one in the TranslateFilename function is exploitable. Impact : By enticing a user to play a file...