Debian: Security Advisory (DSA-1607-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200806-05 : cbrPager: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-05 cbrPager: User-assisted execution of arbitrary code Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use...

cbrPager: User-assisted execution of arbitrary code

Background cbrPager is a comic book pager. Description Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use the system libc library call. Impact A remote attacker could entice a user...

X.Org X server RENDER扩展ProcRenderCreateCursor()拒绝服务漏洞

BUGTRAQ ID: 29665 CVECAN ID: CVE-2008-2361 Xorg X Server是多个厂商操作系统中所捆绑的X窗口系统显示服务器。 X.Org X Server的RENDER扩展中的ProcRenderCreateCursor函数在解析客户端请求时直接将请求中的值用于计算动态缓冲区的大小。这个计算中可能出现整数溢出，导致分配不充分的缓冲区和访问无效内存，X Server可能会崩溃。...

PT-2008-4030 · Cbrpager · Cbrpager

Name of the Vulnerable Software and Affected Versions: cbrPager versions prior to 0.9.17 Description: The issue allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a ZIP aka .cbz or RAR aka .cbr archive filename. Recommendations: For versions prior to...

BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability

BP Blog 6.0 id Remote Blind SQL Injection Vulnerability JosS, Jose Luis Gуngora Fernбndez Spanish Hackers Team www.spanish-hackers.com + Info: Software: bp blog HomePage: http://blog.betaparticle.com/ Exploit: Blind SQL Injection High Vuln file: templatepermalink.asp Vuln file2:...

Lha Directory Traversal Vulnerability in Testing and Extracting Process

Overview LHa for UNIX is vulnerable to directory traversal due to improper path validation when testing or extracting an archive. Impact An attacker could bypass access restriction and create arbitrary files in the directories for which he has no permission. Solution Please refer to the 'Vendor...

MPlayer sdpplin_parse()函数RTSP整数溢出漏洞

BUGTRAQ ID: 28851 CVECAN ID: CVE-2008-1558 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的stream/realrtsp/sdpplin.c文件中的sdpplinparse函数存在整数溢出漏洞： sdpplinparsestream desc-streamid=atoibuf; spplinparse desc-streamstream-streamid=stream; 如果用户所打开的媒体文件中包含有超长的StreamCount SDP参数的话，就可以触发这个溢出，导致执行任意指令。 MPlayer 1....

Python PyLocale_strxfrm函数远程信息泄露漏洞

BUGTRAQ ID: 23887 CVECAN ID: CVE-2007-2052 Python是一种开放源代码的脚本编程语言。 Python的Modules/localemodule.c文件中的PyLocalestrxfrm函数中存在单字节溢出漏洞，允许攻击者读取部分内存内容。 Modules/localemodule.c:361 356 n1 = strlens + 1; 357 buf = PyMemMallocn1; 358 if !buf 359 return PyErrNoMemory; 360 n2 = strxfrmbuf, s, n1;...

Xpdf嵌入字体处理代码执行漏洞

BUGTRAQ ID: 28830 CVECAN ID: CVE-2008-1693 Xpdf是便携文档格式（PDF）文件的开放源码查看器。 Xpdf显示PDF文件中所嵌入的畸形字体的方式存在漏洞，攻击者可以创建恶意的PDF文件，如果打开了该文件就会导致Xpdf崩溃或执行任意指令。 Xpdf 3.x Debian ------ Debian已经为此发布了一个安全公告（DSA-1548-1）以及相应补丁: DSA-1548-1：New xpdf packages fix arbitrary code exitution...

[SECURITY] Fedora 8 Update: comix-3.6.4-6.fc8

Comix is a user-friendly, customizable image viewer. It is specifically designed to handle comic books, but also serves as a generic viewer. It reads images in ZIP, RAR or tar archives also gzip or bzip2 compressed as well as plain image files. It is written in Python and uses GTK+ through the...

kwsphparc-sql.txt

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Archives - id SQL Injection

KwsPHP 1.3.456 Module Archives - id SQL Injection KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP Module Archives (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

USN-590-1: bzip2 vulnerability

It was discovered that bzip2 did not correctly handle certain malformed archives. If a user or automated system were tricked into processing a specially crafted bzip2 archive, applications linked against libbz2 could be made to crash, possibly leading to a denial of service...

[SECURITY] [DSA 1513-1] New lighttpd packages fix CGI source disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1513-1 [email protected] http://www.debian.org/security/ Steve Kemp March 06, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Symantec antiviral engine API multiple security vulnerabilities

Multiple DoS conditions and buffer overflow on RAR archives parsing...

Linux Kernel vmsplice_to_pipe()本地权限提升漏洞

BUGTRAQ ID: 27801 CVECAN ID: CVE-2008-0600 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的实现上存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 Linux Kernel的fs/splice.c文件中的vmsplicetopipe没有正确地验证某些用户域指针，这允许本地攻击者通过特制的vmsplice系统调用获得root用户权限提升。 Linux kernel 2.6.17 - 2.6.24.1 厂商补丁： Debian ------...

[SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1475-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 26, 2008 http://www.debian.org/security/faq -...