IBM Tivoli Access Manager Plugin - Directory Traversal

IBM Tivoli Access Manager Plugin - Directory Traversal source: https://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

DRUPAL-SA-2005-008 XSS and HTTP header injection vulnerability with uploaded files

Paul Laudanski informed us that it's possible to attach files that are able to run Javascript under Internet Explorer. Further investigation of the problem revealed that the same method can be used to inject arbitrary HTTP headers. Versions affected Drupal 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5...

Invision Power Board 1.x - Unauthorized Access

Invision Power Board 1.x - Unauthorized Access source: https://www.securityfocus.com/bid/13802/info Invision Power Board is affected by an unauthorized access vulnerability. Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing...

Invision Power Board 1.x - Unauthorized Access

source: https://www.securityfocus.com/bid/13802/info Invision Power Board is affected by an unauthorized access vulnerability. Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing sufficient authentication credentials. Invision Power...

NPDS 4.85.0 - pollcomments.php?thold SQL Injection

NPDS 4.85.0 - pollcomments.php?thold SQL Injection source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation cou...

MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution

MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution source: https://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary...

ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12596/info ZeroBoard is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate theft of cookie-based...

[SA14182] Frox Deny ACL Security Bypass Vulnerability

TITLE: Frox Deny ACL Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14182 VERIFY ADVISORY: http://secunia.com/advisories/14182/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Frox 0.x http://secunia.com/product/4619/ DESCRIPTION: A vulnerability has been...

[SA14131] Claroline Add Course Script Insertion Vulnerability

TITLE: Claroline Add Course Script Insertion Vulnerability SECUNIA ADVISORY ID: SA14131 VERIFY ADVISORY: http://secunia.com/advisories/14131/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Claroline 1.x http://secunia.com/product/4607/ DESCRIPTION: Yiannis Girod...

RSSH 2.x - Arbitrary Command Execution

RSSH 2.x - Arbitrary Command Execution source: https://www.securityfocus.com/bid/11792/info rssh is reported prone to a remote arbitrary command execution vulnerability. This issue may allow a remote attacker to execute commands and scripts on a vulnerable computer and eventually allow an attacke...

[SAMBA] CAN-2004-0882: Possiebl Buffer Overrun in smbd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: Possible Buffer Overrun in smbd CVE : CAN-2004-0882 Affected Versions: Samba 3.0.x = 3.0.7 Summary: A possible buffer overrun in smbd could lead to code execution by a remote user Patch Availability - - ------------------ A patch for Samba...

LinuxStat 2.x - Directory Traversal

LinuxStat 2.x - Directory Traversal source: https://www.securityfocus.com/bid/11517/info It is reported that LinuxStat is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../' directory...

sudoedit.txt

Reference http://www.sudo.ws/sudo/alerts/sudoedit.html Summary A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that can give an attacker read permission to a file that would otherwise be unreadable. Sudo versions affected 1.6.8 only Details While sudoedit runs the actual...

SudoEdit 1.6.8 Local Change Permission Exploit

Exploit for linux platform in category local exploits ============================================== SudoEdit 1.6.8 Local Change Permission Exploit ============================================== / Copyright ? Rosiello Security 2004 http://www.rosiello.org sudoedit Exploit SOFTWARE : sudoedit...

Mozilla/Firefox Linux Installation Arbitrary File Overwrite (deprecated)

Binary data 2281.prm...

SAFE TEAM Regulus 2.2 - Custchoice.php Update Your Password Action Information Disclosure

SAFE TEAM Regulus 2.2 - Custchoice.php Update Your Password Action Information Disclosure source: https://www.securityfocus.com/bid/11133/info Regulus is reported prone to an information disclosure vulnerability. It is reported that a specified user/customer password hash is contained in a hidden...

SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure

SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid...

SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure

source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid credentials. An attacker may employ data that is obtained in this mann...

Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection

Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection source: https://www.securityfocus.com/bid/10773/info LBE Web HelpDesk is reported susceptible to an SQL injection vulnerability. This issue is due to improper sanitization of user-supplied data. This issue may allow a remote attacker to...

MySQL 4.15.0 - Authentication Bypass

MySQL 4.15.0 - Authentication Bypass source: https://www.securityfocus.com/bid/10654/info MySQL is prone to a vulnerability that may permit remote clients to bypass authentication. This is due to a logic error in the server when handling client-supplied length values for password strings...