CentOS 3 / 4 / 5 : qt (CESA-2007:0721)

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

Windows/x86 (XP SP3) (Turkish) - cmd.exe Shellcode (52 bytes)

Windows/x86 XP SP3 Turkish - cmd.exe Shellcode 52 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF Title : win32/xp sp3 Tr cmd.exe Shellcode 52 bytes Proof : http://img59.imageshack.us/img59/6499/proofc.png Author : ZoRLu / http://inj3ct0r.com/author/577 mail-msn :...

FreeBSD Security Advisory (FreeBSD-SA-06:08.sack.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:08.sack.asc ADV FreeBSD-SA-06:08.sack.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-06:08.sack.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:08.sack.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

PT-2008-3572 · Cisco · Cisco Pix Security Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 7.1.x through 7.1269 Cisco Adaptive Security Appliance ASA and Cisco PIX security appliance versions 7.2.x through 7.23 Cisco Adaptive Security Appliance ASA and...

Directory Traversal in SafeNet Sentinel Protection Server and Keys Server

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

PHP-revista 1.1.2 - Multiple SQL Injections

php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits : ==============================================================================...

SOL6924 - Insertion of special characters in URL path circumvents Accessibility Scope and Access Control Lists

It is possible to bypass the Deny list, configured in the Accessibility Scope section located on the Portal Access: Web Applications: Master Group Settings page, by inserting certain special characters into a URL path. In FirePass version 6.0, this issue also applies to the Deny list configured...

SOL6920 - Cross-site scripting vulnerabilities

Multiple cross-site scripting XSS vulnerabilities exist in the FirePass Administrative Console pages. The affected FirePass URLs fail to fully sanitize certain URL arguments before the requested web page content is returned to the browser. It is possible for an attacker to create web pages, email...

Microsoft Internet Explorer TIF Folder arbitrary file access vulnerability

Overview A vulnerability in the way Microsoft Internet Explorer handles drag and drop operations may allow access of arbitrary files within the Temporary Internet Files folder. Description Microsoft Internet Explorer contains a vulnerability that could be exploited when handling drag and drop...

VMSA-2006-0002 - VMware Server sensitive information lifetime issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0002 Synopsis: VMware Server sensitive information lifetime issue Advisory URL:...

Memory corruption

Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...

CVE-2006-0433

Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...

[Full-disclosure] LiveJournal CSS/JS injection vulnerability

SUMMARY ---------------------------------------------------------------------- The popular Livejournal1 social networking software contained an error which allowed for the inclusion of Javascript in user-supplied content. 1 http://www.livejournal.org/, http://www.livejournal.com/ BACKGROUND...

CVE-2005-1184

The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that th...

CVE-2005-0066

The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged aka "TCP acknowledgement number checking", which makes it easier for...

CVE-2005-0066

The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged aka "TCP acknowledgement number checking", which makes it easier for...

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service // source: https://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneou...

Ethereal integer underflow when parsing malformed PGM packets with NAK lists

Overview Ethereal fails to properly parse Pragmatic General Multicast PGM packets containing a crafted negative acknowledgement NAK list. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing PGM data. There is a vulnerability in the way...