Wireshark 1.2.5版本修复多个安全漏洞

BUGTRAQ ID: 37407 CVE ID: CVE-2009-4376,CVE-2009-4377,CVE-2009-4378 Wireshark之前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的Daintree SNA文件解析器中存在缓冲区溢出漏洞，IPMI、SMB和SMB2协议解析模块中存在拒绝服务漏洞。如果用户受骗从网络抓取了恶意的报文或读取了恶意抓包文件的话，就会导致解析模块崩溃或执行任意代码。 Wireshark 0.9.0 - 1.2.4 厂商补丁： Wireshark ---------...

OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'rejects.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'add.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 XSRF Exploit

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action="http://10.1.1.165/callwzd.html" method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...

Zoom VoIP Phone Adapter XSRF Exploit

Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - Cross-Site Request Forgery Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 milw0rm.com 2009-01-29...

LibPNG Graphics Library Remote Buffer Overflow Exploit

No description provided by source. / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po retaddr outfile ...

Debian Security Advisory DSA 138-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 138-1. OpenVAS Vulnerability Test $Id: deb1381.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 138-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

TISA2007-01.txt

========================================================================= TeamIntell Security Advisory TISA2007-01 ------------------------------------------------------------------------- Letterman Subscriber Module "Itemid" Script Insertion Vulnerability...

[SA15911] PHPNews "prevnext" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA14882] PunBB SQL Injection and Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: PunBB SQL Injection and Cross-Site Scripting...

Master of Orion III <= 1.2.5 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================== Master of Orion III include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...

Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities

Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/11550/info Master of Orion III is reported prone to multiple remote denial of service vulnerabilities. These issues occur because the application does not handle...

LibPNG Graphics Library - Remote Buffer Overflow

LibPNG Graphics Library - Remote Buffer Overflow / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po outfile -all u need to give is retaddr, the default file it creates is controlled by the defin...

LibPNG Graphics Library - Remote Buffer Overflow

/ exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po outfile -all u need to give is retaddr, the default file it creates is controlled by the define below, or u can pass a diff outfile name on the...

DEBIAN-CVE-2003-0059

Unknown vulnerability in the chktrans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys...