DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755 CVE ID：CVE-2009-0663 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg存在基于堆的缓冲区溢出，远程攻击者可以利用漏洞执行任意代码。 使用pggetline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux...

Debian git-core DEC Alpha & MIPS本地特权提升漏洞

BUGTRAQ ID: 34644 CNCAN ID：CNCAN-2009042201 Debian git-core是一款用于Linux内核开发的版本控制工具。 Debian git-core不正确设置权限，本地攻击者可以利用漏洞提升特权。 Git版本控制系统在部分DEC Alpha & MIPS架构上，/usr/share/git-core/templates/下的文件属主为非root用户，这允许本地系统用户写这些文件并可能导致特权提升。 Debian git-core 1.5.6 5-3 Debian git-core 1.4.4 4-4 可参考如下程序： Debian Linux...

Debian DSA-1777-1 : git-core - file permission error

Peter Palfrader discovered that in the Git revision control system, on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the local system to write to these files and possibly escalate their privileges. This issue only...

[SECURITY] [DSA 1777-1] New git-core packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1777-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 21, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1776-1] New slurm-llnl packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1776-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 21, 2009 http://www.debian.org/security/faq -...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

DSA-1777-1 git-core - privilege escalation

Bulletin has no description...

XRDP 0.4.1 - Remote Buffer Overflow (PoC)

XRDP 0.4.1 - Remote Buffer Overflow PoC / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 root@crateria:/xrdp gcc -w -lssl -lX11 xrdp-poc.c -o xrdp-poc 02:00:29 root@crateria:/xrdp ./xrdp-poc 10.0.0.13 = Connected to 10.0.0.13 = Hit CTRL-C if the progress bar stops. Be...

Openswan和strongSwan DPD报文远程拒绝服务漏洞

BUGTRAQ ID: 34296 CVECAN ID: CVE-2009-0790 Openswan和strongSwan都是Linux系统下的IPSEC实现。 死亡对等体检测（DPD）是IPsec IKE通知消息，使用ICOOKIE/RCOOKIE机制将入站报文匹配到已知的安全关联（ISAKMP）。在一个端点的ISAKMP状态已过期但另一个端点仍在使用旧状态发送DPD通知的情况下，如果远程攻击者向Openswan和strongSwan发送了恶意的RUTHERE或 RUTHEREACK通知报文的话，就会在不存在的状态对象st上触发空指针引用，导致pluto IKE守护程序崩溃并重启。...

Oracle WebLogic IIS connector JSESSIONID - Remote Overflow

!/usr/bin/perl No point in keeping this private anymore! ksOSe - 02/16/2009 - CVE-2008-5457 Tested on w2k sp4 and w2k3 R2 sp2 no NX cohelet framework-3.2 ./msfcli multi/handler PAYLOAD=windows/reflectivemeterpreter/reversetcp LHOST=10.10.10.1 LPORT=80 E Please wait while we load the module tree...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

CVE-2009-0866

CVE-2009-0866 affects pHNews Alpha 1. The issue is improper access control that allows a remote attacker to download the database by requesting extra/genbackup.php, placing sensitive data under the web root at risk. The root cause is insufficient access restrictions on stored data. Public details...

CVE-2009-0866

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

CVE-2009-0866: Undefined Security Weakness

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

pHNews Alpha 1 (genbackup.php) Database Disclosure Vulnerability

No description provided by source. 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x...

pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod ...

pHNews Alpha 1 SQL Injection

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod = $GET"mod"; // If no mod is select...

pHNews Alpha 1 Database Disclosure

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x03 Exploit: Exploit:...

pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== pHNews Alpha 1 header.php mod SQL Injection Vulnerability =========================================================== 0x01 Informations: Name : pHNews Alpha 1 Download :...

pHNews Alpha 1 - mod SQL Injection

pHNews Alpha 1 - mod SQL Injection 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod ...