Linux Kernel "fs/partitions/ldm.c"缓冲区溢出和拒绝服务漏洞

BUGTRAQ ID: 46512 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"fs/partitions/ldm.c"在实现上存在缓冲区溢出和拒绝服务漏洞，攻击者可利用此漏洞执行任意代码、提升权限、泄露敏感信息和造成拒绝服务。 不管是否启用了自动分区，Kernel自动评估存储设备分区表。评估MAC和LDM分区表的代码包含下列漏洞： 1、fs/partitions/mac.c中的macpartition存在缓冲区溢出漏洞导致通过破坏的MAC分区表造成拒绝服务。...

AIX 530011 : U840331

The remote host is missing AIX PTF U840331 which is related to the security of the package devices.usbif.08025002.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 530011 : U840352

The remote host is missing AIX PTF U840352 which is related to the security of the package devices.pci.1410bd02.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-090 February 18, 2011 -- CVE ID: CVE-2010-4227 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware --...

jSchool Advanced SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

jSchool Advanced - SQL Injection

jSchool Advanced - SQL Injection ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

ZDI-11-054: Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution Vulnerability

ZDI-11-054: Hewlett-Packard Data Protector Client EXECCMD omnichkds.sh Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-054 February 7, 2011 - This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline. To view...

jSchool Advanced - SQL Injection

----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

ZDI-11-037: Symantec IM Manager Administrative Interface IMAdminSchedTask.asp Eval Code Injection Remote Code Execution Vulnerability

ZDI-11-037: Symantec IM Manager Administrative Interface IMAdminSchedTask.asp Eval Code Injection Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-037 January 31, 2011 -- CVE ID: CVE-2010-3719 -- CVSS: 8.5, AV:N/AC:M/Au:S/C:C/I:C/A:C -- Affected Vendors:...

TELUS Security Labs VR - Symantec Antivirus Intel Alert Handler Service Denial of Service

Symantec Antivirus Intel Alert Handler Service Denial of Service TSL ID: FSC20101213-06 1. Affected Software Symantec Antivirus Corporate Edition 10.1.8.8000 and possibly prior Symantec System Center 10.1.8.8000 and possibly prior Reference:...

Symantec Web Gateway Management GUI远程SQL注入漏洞

BUGTRAQ ID: 45742 CVE ID: CVE-2010-0115 Symantec Web Gateway是赛门铁克企业级网页威胁防护解决方案。 Symantec Web Gateway在SQL查询中使用用户提供的数据前没有正确过滤，在实现上存在安全漏洞，远程攻击者可利用此漏洞控制设备、访问或修改数据或利用基础数据库中的潜在漏洞。 在向login.php页面发送解析请求时，进程未正确过滤USERNAME POST参数。提供发送特制的字符串，远程攻击者可利用此漏洞向服务器上的后端数据库注入任意SQL。 Symantec Web Gateway 4.5 厂商补丁： Symant...

TinyBB 'Profile' SQL Injection Vulnerability

TinyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

TinyBB 'Profile' SQL Injection Vulnerability

TinyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Linux Kernel "hci_uart_tty_open()"本地拒绝服务漏洞

BUGTRAQ ID: 45014 CVE ID: CVE-2010-4242 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成Kernel崩溃，拒绝服务合法用户。 此问题源于hciuartttyopen未检查tty是否具有write op。 Linux kernel 2.6.0-2.6.37 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Elcom CommunityManager.NET Auth Bypass Vulnerability

Exploit for asp platform in category web applications Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET...

Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004

Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET Affected versions. v6.7 verified and possibly others...

Elcom CommunityManager.NET - Authentication Bypass

Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET Affected versions. v6.7 verified and possibly others...

Elcom CommunityManager.NET - Authentication Bypass

Elcom CommunityManager.NET - Authentication Bypass Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET...

AIX 610003 : U838967

The remote host is missing AIX PTF U838967 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

jSchool Advanced Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== jSchool Advanced Blind SQL Injection Vulnerability ================================================== Author : Don Tukulesto email protected Site : http://indonesiancoder.com Vendor :...