5498 matches found
FrontBase关系数据库服务器create procedure远程栈溢出漏洞
FrontBase是一款企业级的关系数据库服务器。 FrontBase在创建存储过程时存在栈溢出漏洞，允许攻击者获得NT AUTHORITY\SYSTEM或root用户权限。 如果攻击者通过“create procedure” SQL语句传送了超长参数的话，就可以触发这个溢出，导致内存破坏。例如，以下SQL语句： create procedure "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa...
Information displayed in the security field should be approached with caution. – Opera Security Advisories
Information displayed in the security field should be approached with caution. – Opera Security Advisories OPCOM Team | February 9, 2007 Summary Even though a Certificate Authority has verified and signed it, a usershould not trust the Organization name without checking the domain name.A fraudule...
CVE-2006-6967
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. In addition, it describes...
Multiple Printer Providers (spooler service) Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ========================================================================= Multiple Printer Providers spooler service Privilege Escalation Exploit ========================================================================= /Private exploit-...
Multiple Printer Providers (Spooler Service) - Local Privilege Escalation
/Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acuña - [email protected] Website: http://www.514.es This code should allow to gain SYSTEM privileges with the following...
CVE-2006-6492
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006. Notes: none...
User Authority Denial of Service vulnerability
...
VMSA-2006-0010 - SSL sessions not authenticated by VC Clients
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0010 Synopsis: SSL sessions not authenticated by VC Clients Patch URL:http://www.vmware.com/download/vi/vc-201-200611-patch.html...
CVE-2006-4991
RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...
CVE-2006-4991
RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...
CVE-2006-4991
RSA Keon Certificate Authority (KeonCA) Manager versions 6.5.1 and 6.6 are affected. The vulnerability allows local privileged users to hide CA activities by tampering auditor logs: (1) modifying or deleting a and its signature in the XML log without triggering the integrity check on the entire ...
[Full-disclosure] RSA Keyon Log verification bypass vulnerability
Arhont Ltd.- Information Security Arhont Advisory by: Andrei Mikhailovsky Advisory: RSA Keon Manager log verification bypass Product release: Versions 6.6 and 6.5.1 Arhont ref: arh200605-1 Class: Design flaw Model Specific: Other versions of RSA Keon are likely to be vulnerable DETAILS: During th...
security flaw
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...
security flaw
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...
security flaw
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...
Check Point FireWall-1 ICA Service Detection
The remote host is running Check Point FireWall-1 and is operating a web server on this port for its internal certificate authority ICA, which provides users with certificate revocation lists and registers users when using the Policy Server. Note that it is not known whether it is possible to...
security flaw
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...
DEBIAN-CVE-2006-2778
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...
Buffer overflow
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...
CVE-2006-2778
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow...