CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

[SECURITY] [DSA 1554-2] New roundup packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1554-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 06, 2008 http://www.debian.org/security/faq -...

telltarget <= 1.3.3 (tt_docroot) Remote File Inclusion Vulnerabilities

No description provided by source. telltarget CMS 1.3.3 = Multiple Remote File Inclusion Vulnerabilitie D.Script: http://www.telltargetcms.de/download/telltarget1.3.3.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/phplib/siteconf.php?ordnertiefe=Shell...

[SA19323] RunIt "chpst" Multiple Groups Handling Security Issue

TITLE: RunIt "chpst" Multiple Groups Handling Security Issue SECUNIA ADVISORY ID: SA19323 VERIFY ADVISORY: http://secunia.com/advisories/19323/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: runit 1.x http://secunia.com/product/8850/ DESCRIPTION: Tino Keitel ha...

[Full-disclosure] SimpleCDR-X - Insecure tempfile handling

SimpleCDR-X - Insecure tempfile handling +----------------------------------------+ Date: 2005-09-15 URL: http://ogre.rocky-road.net/cdr.shtml Vendor Notified: Days ago, no answer. Version: 1.3.3 latest - Description - Files beeing recorded can be read by any user on the system due to insecure...

Moodle < 1.3.3 'help.php' 'file' Parameter XSS

The version of Moodle running on the remote host is affected by a cross-site scripting vulnerability. Input to the 'file' parameter of 'help.php' is not properly sanitized. A remote attacker can exploit this by tricking a user into requesting a maliciously crafted URL, resulting in stolen...

CVE-2003-0978

Format string vulnerability in gpgkeyshkp experimental HKP interface for the GnuPG gpg client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service crash and possibly execute arbitrary code during key retrieval...

PHPBBMod 1.3.3 - PHPInfo Information Disclosure

source: https://www.securityfocus.com/bid/5942/info phpBBmod ships with a sample script phpinfo.php that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be revealed. This issue was reported in...