CVE-2005-2851

CVE-2005-2851 affects smb4k and related versions prior to 0.6.3, enabling local users to read sensitive files via a symlink attack on temporary files (smb4k.tmp, or sudoers/super.tab). The underlying issue is that Smb4K writes contents to a target file pointed to by an insecure pre-existing symli...

SSA-18705 sudo upgrade fixes a potential vulnerability

New sudo packages are available to fix a security problem which may allow users to become root, or to execute arbitrary code as root. Heres's the information from the Slackware 8.0 ChangeLog: ---------------------------- Thu Apr 25 12:00:50 PDT 2002 patches/packages/sudo.tgz: Upgraded to...

PeerCast 0.1211 - Remote Format String

PeerCast 0.1211 - Remote Format String / \ PeerCast \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include include include include include include include include include includ...

Hosting Controller 6.1 - 'plandetails.asp' Information Disclosure

source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These issues reportedly affect Hosting Controller 6.1 HotFix 2.0 and prio...

CVE-2004-1920

X-Micro WLAN 11b Broadband Router (versions 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0) contains a hardcoded 'super' username and password, which could allow remote attackers to gain access. The connected documents confirm the affected product and credential issue but do not provide details on exploitation...

Keyvan1 ImageGallery - Database Disclosure

Keyvan1 ImageGallery - Database Disclosure source: https://www.securityfocus.com/bid/13630/info Keyvan1 ImageGallery is prone to an access validation vulnerability that could allow the underlying database to be downloaded. http://www.example.com/path/image.mdb...

CVE-2004-1342

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...

CVE-2005-1305

The CVE-2005-1305 issue affects the hyper.cgi script. It allows remote attackers to read arbitrary files by supplying a full pathname in the argument. NVD lists a base score of 5.0 (Medium) with network attack vector, low complexity, no authentication, and partial confidentiality impact. Exploit ...

artmedic_links5 remote file access exploit

You can read details of this vulnerability here: http://www.securityfocus.com/archive/1/367144 Very simple source of exploit, enjoy. / artmediclinks5 remote file access exploit Adam Simuntis [email protected] / include stdio.h include stdlib.h include arpa/inet.h include sys/types.h include sys/socket.h...

CVE-2005-1241

CVE-2005-1241 describes a directory traversal in the Powertech third‑party tool used with the iSeries AS/400 FTP server, enabling remote access to arbitrary files (including those in qsys.lib) via ".." in GET requests. The initial and connected records present no explicit patch or version details...

[NEWS] UTStarcom's iAN-02EX Remote Access Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

LimeWire 4.1.2 - 4.5.6 Inappropriate Get Request Remote Exploit

Exploit for multiple platform in category remote exploits =============================================================== LimeWire 4.1.2 - 4.5.6 Inappropriate Get Request Remote Exploit =============================================================== !/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote an...

CVE-2005-0747

ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp...

CProxy 3.3.x - 3.4.4 Multiple Vulnerabilities

The remote host is running a version of Computalynx's CProxy Server that suffers from the following vulnerabilities: - Arbitrary Local File Access CProxy allows an attacker to retrieve arbitrary local files by issuing an HTTP request with directory traversal sequences relative to a subdirectory...

CVE-2005-0494

The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request...

CVE-2004-1650

D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet...

CVE-2004-1591

CVE-2004-1591 affects the Micronet Wireless Broadband Router SP916BM (firmware before 1.9). The web interface resets the router password to the default password when the device is shut off, potentially allowing an attacker to gain access remotely. The available documents confirm the affected prod...

HP-UX PHSS_30173 : HP-UX XFree86, Remote Unauthorized Privileged Access, Execution of Arbitrary Code (HPSBUX01018 SSRT4692 rev.2)

s700800 11.11 Xserver cumulative patch : A potential security vulnerability has been identified with HP UX, where a buffer overflow in XFree86 could be remotely exploited to gain unauthorized privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

[Full-Disclosure] [ GLSA 200502-21 ] lighttpd: Script source disclosure

Gentoo Linux Security Advisory GLSA 200502-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Moderate: Red Hat Security Advisory: mod_python security update

An updated modpython package that fixes a security issue in the publisher handle is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Modpython is a module that embeds the Python language interpreter...