织梦(DedeCms) V 5.3 任意变量覆盖漏洞

看核心文件include/common.inc.php中的代码 //检查和注册外部提交的变量 foreach$REQUEST as $k=$v if strlen$k0 && eregi'^|cfg|GLOBALS',$k && !isset$COOKIE$k //程序员逻辑混乱了？ exit'Request var not allow!'; 这个地方可以通过提交COOKIE变量绕过cfg等关键字的过滤 接着是注册变量的代码 foreachArray'GET','POST','COOKIE' as $request foreach$$request as $k = $v $$k =...

Nortel Contact Center Manager Password Disclosure

SEC Consult Security Advisory ========================================================================== title: Nortel Contact Center Manager Server Password Disclosure program: Nortel Contact Center Manager Server vulnerable version: 6.0 homepage: http://www.nortel.com/ccms found: 2008-11-14 by:...

Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

AIX 530007 : U824978

The remote host is missing AIX PTF U824978 which is related to the security of the package bos.mp You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Microsoft写字板和Office文本转换器内存破坏漏洞（MS09-010）

BUGTRAQ ID: 29769 CVECAN ID: CVE-2009-0087 写字板是Windows操作系统中附件所提供的简单文本编辑工具。 如果用户打开了包含有畸形数据的特制Word 6文件的话，写字板和Microsoft Office中的内存破坏漏洞可能导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows 2000SP4 Microsoft...

Linksys WVC54GCA Wireless-G '/img/main.cgi' Information Disclosure

The remote host is a Linksys WVC54GCA network camera. The version of the firmware of the remote camera contains a flaw that allows authenticated users to download the .htpasswd file from the remote host, which gives them the ability to crack the passwords of other users, including the password of...

HP StorageWorks Storage Mirroring Software存在多个远程漏洞

BUGTRAQ ID: 34611 CVE ID：CVE-2009-0716 CVE-2009-0717 CVE-2009-0718 CNCVE ID：CNCVE-20090716 CNCVE-20090717 CNCVE-20090718 HP StorageWorks Storage Mirroring存储镜像软件是一款基于主机的连续复制解决方案。 HP StorageWorks Storage Mirroring软件存在多个安全问题，远程攻击者可以利用漏洞进行任意代码执行，拒绝服务和未授权访问攻击。 目前没有详细漏洞细节提供。 HP HP StorageWorks Storage...

Symantec Products KeyView \"wp6sr.dll\" Buffer Overflow

CVE-2008-4564 Symantec Products KeyView "wp6sr.dll" Buffer Overflow Secunia Advisory: SA34307 Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment Release Date: 2009-03-17 Last Update: 2009-03-18 Popularity: 658 views...

IBM Director <= 5.20.3su2 CIM Server Remote DoS Vulnerability

No description provided by source. SEC-CONSULT Security Advisory 20090305-1 ========================================================================================= title: IBM Director CIM Server Remote Denial of Service Vulnerability program: IBM Director for Windows vulnerable version: = 5.20....

AIX 610000 : U818437

The remote host is missing AIX PTF U818437 which is related to the security of the package bos.rte.bosinst You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U823800

The remote host is missing AIX PTF U823800 which is related to the security of the package devices.common.IBM.sissas.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

NextApp Echo XML Injection

SEC Consult Security Advisory ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 me...

Magento 1.2.0 Cross Site Scripting

Magento Multiple Cross-Site Scripting Vulnerabilities - Security Advisory - SOS-09-002 Release Date. 24-Feb-2009 Vendor Notification Date. 21-Jan-2009 Product. Magento Platform. Linux / PHP verified, possibly others Affected versions. Magento 1.2.0 verified, possibly others Severity Rating. Mediu...

Libero Cross Site Scripting

Libero Cross-Site Scripting Vulnerability - Security Advisory - SOS-09-001 Release Date. 23-Feb-2009 Vendor Notification Date. 20-Oct-2008 Product. Libero Platform. Windows verified, possibly others Affected versions. Libero v5.3 SP5 verified, possibly others Severity Rating. Medium Impact...

Enomaly ECP多个安全漏洞

BUGTRAQ ID: 33544 CVECAN ID: CVE-2008-4990,CVE-2009-0390 Enomaly ECP（之前名为Enomalism）是用于管理虚拟机的软件。 ECP的enomalism2.sh中存在多个安全漏洞，本地攻击者可以通过符号链接攻击以root用户权限覆盖任意系统文件、向kill命令注入参数以终止任意进程或向进程发送信号，或导致虚拟机无法启动。 Enomaly Elastic Computing Platform 2.1 临时解决方法： 将PIDFILE从/tmp/enomalism2.pid更改为/var/run/enomalism2.pid。...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability

ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-011 February 10, 2009 -- CVE ID: CVE-2009-0075 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Custome...

iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 01.13.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 13, 2009 I. BACKGROUND Oracle Secure Backup is a network backup system for Oracle Databases. For more information, see:...

iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is availabl...

iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.02.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 02, 2008 I. BACKGROUND The Sun Java JRE is Sun's implementation of the Java runtime. For more information, see the vendor's site found at the following link...