Solaris ypupdated Command Execution

This exploit targets a weakness in the way the ypupdated RPC application uses the command shell when handling a MAP UPDATE request. Extra commands may be launched through this command shell, which runs as root on the remote host, by passing commands in the format '|'. Vulnerable systems include...

CVE-2008-1819: Undefined Security Weakness

Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09...

CVE-2008-1817: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to 1 SDOIDX in the Spatial component, aka DB07; and 2 Core RDBMS, aka DB10. NOTE: the previous information was obtained...

CVE-2008-1827: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to a Advanced Pricing component, aka 1 APP02, 2 APP03, and 3 APP09; b Application Object Library component, aka 4 APP04, 5 APP07, and 6 APP11; c Applications Manager...

CVE-2007-6713: Undefined Security Weakness

Unspecified vulnerability in Flip4Mac WMV before 2.2.0.49 has unknown impact and attack vectors related to malformed WMV files...

CVE-2008-1764: Undefined Security Weakness

Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."...

CVE-2008-1766: Undefined Security Weakness

Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to "two minor security-related bugs."...

Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit (meta)

No description provided by source. / \ / \ | | | | ----====/ /\/ /\ | || |====---- | | | || | | | | | | | | | | | | |...

CVE-2008-1681: Undefined Security Weakness

Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege...

BSD (Multiple Distributions) - 'strfmon()' Integer Overflow

// source: https://www.securityfocus.com/bid/28479/info Multiple BSD platforms are prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts wil...

DNN (DotNetNuke) Upgrade Process ValidationKey Generation Weakness Privilege Escalation

The version of DNN installed on the remote host appears to be using a default machine key, both 'ValidationKey' and 'DecryptionKey', for authentication token encryption and validation. A remote attacker can leverage this issue to bypass authentication and gain administrative access to the affecte...

CVE-2008-1396

Plone CMS 3.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...

CVE-2008-1049: Undefined Security Weakness

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-0824: Undefined Security Weakness

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors...

CVE-2008-0741: Undefined Security Weakness

Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...

Weak initial sequence number generation

Weak initial sequence number generation allows to spoof TCP connection...

CVE-2008-0500: Undefined Security Weakness

Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to 1 modlogin and 2 modtemplatechooser...

CVE-2008-0389: Undefined Security Weakness

Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server WAS 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors...

Debian: Security Advisory (DSA-1305-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-273)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...