448 matches found
Solaris/SPARC 2.7 lpset exploit (well not likely !)
Hi, lpset seems to use strcat to pass the argument for -r flag /usr/lib/print/lib/../../../../tmp/foo and appends .so to the end. in this case /tmp/foo.so is going to be dlopen but there is a special case /usr/lib/print/lib directory has to exist. xploit shell script is attached. $ uname -a SunOS...
CVE-2000-0208
The htdig ht://Dig CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks in parameters to htsearch...
EUVD-1999-0549
The registry in Windows NT can be accessed remotely by users who are not administrators...
ms.odbc.coldfusion.txt
Date: Tue, 1 Jun 1999 11:45:35 -0700 From: [email protected] To: [email protected] Subject: New Allaire Security Bulletin ASB99-09 Dear Allaire Customer -- We have recently become aware of a serious security vulnerability that may affect customers using Microsoft Access with ColdFusion...
Security Update for Microsoft Access 2016 (KB5002641) 64-Bit Edition
A security vulnerability exists in Microsoft Access 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Update Rollup 21 for Exchange Server 2010 Service Pack 3 (KB4091243)
This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...
Security Update for Microsoft Access 2010 (KB3114416) 64-Bit Edition
A security vulnerability exists in Microsoft Access 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...