Links ELinks SMBClient远程命令执行漏洞

Links ELinks是一款web浏览器。 Links ELinks存在一个缺陷，允许恶意web站点在目标机器上执行smbclient命令，此缺陷可能导致从目标系统上读取任意文件或者上传恶意文件到目标系统并执行。 具体问题代码如下： smbfunc in smb.c: ... 143 if share 144 if !dir || dirstrlendir - 1 == '/' || dirstrlendir - 1 == '\' 145 if dir 146 vn++ = "-D"; 147 vn++ = dir; 148 149 vn++ = "-c"; 150 vn++ =...

RHEL 4 : firefox (RHSA-2006:0733)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

Links 1.00pre12 (smbclient) Remote Code Execution Exploit

No description provided by source. !-- Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes i...

linkssmbclient.txt

Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes it possible to read any file from the...

Critical: Red Hat Security Advisory: elinks security update

An updated elinks package that corrects a security vulnerability is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Elinks is a text mode Web browser used from the command line that supports renderi...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

CVE-2006-5925 : A flaw in Elinks (and affected smb:// handling) allows a remote attacker to execute arbitrary code when smbclient is installed, by processing crafted smb:// URIs. The issue affects Elinks 0.9.2 and related configurations; Red Hat/CentOS and Ubuntu advisories (RHSA-2006:0742, USN-8...

[Full-disclosure] Links smbclient command execution

Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes it possible to read any file from the...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

Links 1.00pre12 - smbclient Remote Code Execution

Links 1.00pre12 - smbclient Remote Code Execution !-- Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. Th...

Links 1.00pre12 (smbclient) Remote Code Execution Exploit

Exploit for multiple platform in category remote exploits ========================================================= Links 1.00pre12 smbclient Remote Code Execution Exploit ========================================================= !-- Links smbclient command execution...

firefox security update

CentOS Errata and Security Advisory CESA-2006:0733 Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web...

Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie

PR05-06: Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk/ Date found: 2005-02-27 Vulnerable: Immediacy .NET CMS 5.2 Severity: Low Author: Gemma Hughes gemma.hugh...

CVE-2006-5805

Microsoft Internet Explorer 7 contains a vulnerability in the handling of links to res://ieframe.dll/invalidcert.htm that can cause the browser to display the URL of a secure site in the address bar while reporting the certificate as invalid. The attack vector is a crafted link that redirects to ...

Symantec Automated Support Assistant ActiveX control buffer overflow

Overview The Symantec Automated Support Assistant ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Symantec Automated Support Assistant control is an ActiveX control that comes with...

Mozilla Firefox Range脚本对象拒绝服务漏洞

Firefox是一款开放源码的WEB浏览器。 Firefox的Range对象中存在空指针引用问题，成功利用这个漏洞的攻击者可以导致浏览器崩溃。 可以使用selectNode方式初始化Range对象选择将要注入Range中的节点，也可以使用createContextualFragment方式创建文档碎片，如下所示： var tagString = "divI am a div node/div"; var range = document.createRange; range.selectNodedocument.getElementsByTagName"div".item0; var...

多个厂商Web浏览器JavaScript击键事件过滤漏洞

Firefox和IE都是非常流行的WEB浏览器。 Firefox、IE和其他一些WEB浏览器没有安全的处理用户的键盘输入，导致在输入文本时脚本可能取消某些击键事件。攻击者可以将键盘事件从一个输入表单暗中转到同一页面中隐藏的文件上传对话框中，导致诱骗用户上传文件。但如果要利用这个漏洞，攻击者必须能够诱骗用户手动输入所要下载文件的完整路径。 Microsoft Internet Explorer 7 Beta 2 Microsoft Internet Explorer 7 Beta 1 Microsoft Internet Explorer 6.0 Microsoft Internet...

Microsoft Internet Explorer远程HTA执行漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer处理HTA的方式存在漏洞，远程攻击者可能利用此漏洞在客户机器上执行任意代码。 Internet Explorer中初始化HTML应用（HTA）的方式可能绕过安全控制，允许执行HTA而不在Internet Explorer中显示正常的安全对话框。攻击者可以通过创建恶意的Web页面来利用这个漏洞。如果用户访问了该页面，就会导致执行任意代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer...

AOL YGPPDownload ActiveX控件堆溢出漏洞

America Online 9.0 Security Edition是美国在线发布的基于Internet Explorer技术的客户端软件，可提供安全性和可用性功能。 AOL的YGPPDownload ActiveX控件（YGPPicDownload.dll）在处理对AddPictureNoAlbum方式及downloadFileDirectory属性的输入时存在两个堆溢出漏洞，可能允许攻击者在用户浏览器中执行任意指令。 AOL AOL 9.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.aol.com/...

Microsoft Internet Explorer弹出框跨域信息泄露漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer处理导航方式时存在信息泄露漏洞，恶意网站可能跨域收集客户端信息。 攻击者可以创建特制的Web页面，如果用户访问了该页面或浏览了特制的邮件消息的话，就会允许攻击者读取另一个Internet Explorer域中的cookies或其他数据。但是，必须用户交互才能利用这个漏洞。 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP1...