PostNuke Phoenix 0.760 RC3 - Module Cross-Site Scripting

PostNuke Phoenix 0.760 RC3 - Module Cross-Site Scripting source: https://www.securityfocus.com/bid/13076/info A remote cross-site scripting vulnerability affects PostNuke. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamical...

PunBB 1.2.2 - Authentication Bypass

PunBB 1.2.2 - Authentication Bypass !/usr/bin/perl use IO::Socket; PunBB version 1 // Check if there's a user with the user ID and password hash from the cookie $result = $db-query'SELECT .... tra-la-la... ; $punuser = $db-fetchassoc$result; // If user authorisation failed if !isset$punuser'id' |...

USN-91-1: EXIF library vulnerability

Sylvain Defresne discovered that the EXIF library did not properly validate the structure of the EXIF tags. By tricking a user to load an image with a malicious EXIF tag, an attacker could exploit this to crash the process using the library, or even execute arbitrary code with the privileges of t...

Mandrake Linux Security Advisory : cyrus-imapd (MDKSA-2005:051)

Several overruns have been fixed in the IMAP annote extension as well as in cached header handling which can be run by an authenticated user. As well, additional bounds checking in fetchnews was improved to avoid exploitation by a peer news admin. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2005-0531

The atmgetaddr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments...

ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities

ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12596/info ZeroBoard is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

HP-UX PHNE_30905 : HP-UX Running ARPA Transport, Local Denial of Service (DoS) (HPSBUX01054 SSRT3552 rev.2)

s700800 11.04 VVOS cumulative ARPA Transport patch : A potential vulnerability has been identified in the HP-UX ARPA Transport which could be exploited by a local user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in...

CVE-2005-0244

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command...

CVE-2005-0069

The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...

phpEventCalendar HTML injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: phpEventCalendar HTML injection Vulnerability discovery: Madelman madelman AT iname.com Date: 25/01/2005 Severity: Medium. Registered users can obtain other users cookies Summary: - -------- phpEventCalendar is a MySQL backed application that...

p5-DBI -- insecure temporary file creation vulnerability

Javier Fernández-Sanguino Peña reports: The DBI library, the Perl5 database interface, creates a temporary PID file in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by the person executing the parts of the library...

[SA13819] OpenBSD TCP Retransmission Timeout Calculation Denial of Service

TITLE: OpenBSD TCP Retransmission Timeout Calculation Denial of Service SECUNIA ADVISORY ID: SA13819 VERIFY ADVISORY: http://secunia.com/advisories/13819/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: OpenBSD 3.x http://secunia.com/product/100/ DESCRIPTION: A...

CVE-2004-1063

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safemodeexecdir restrictions and execute commands outside of the intended safemodeexecdir via shell metacharacters in the current directory name. NOTE: this issue was...

IBM DB2 Windows Permission Problems (#NISR05012005F)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 Windows Permission Problems Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date of Publi...

CVE-2004-2300

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this...

CVE-2004-0813

Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...

CVE-2004-2395

Memory leak in passwd 0.68 allows local users to cause a denial of service memory consumption via a large number of failed read attempts from the password buffer...

CVE-2004-1268

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

CVE-2004-0496

Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool...

[SA13370] AIX Unspecified System Startup Scripts Vulnerability

TITLE: AIX Unspecified System Startup Scripts Vulnerability SECUNIA ADVISORY ID: SA13370 VERIFY ADVISORY: http://secunia.com/advisories/13370/ CRITICAL: Less critical IMPACT: Manipulation of data, DoS WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A...