6396 matches found
CVE-2009-1756
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie mcookie on the command line when invoking xauth from 1 app.cpp and 2 switchuser.cpp, which allows local users to access the X session by listing the process and its arguments...
CVE-2009-1756
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie mcookie on the command line when invoking xauth from 1 app.cpp and 2 switchuser.cpp, which allows local users to access the X session by listing the process and its arguments...
CVE-2009-1756
SLiM Simple Login Manager 1.3.0 places the X authority magic cookie mcookie on the command line when invoking xauth from 1 app.cpp and 2 switchuser.cpp, which allows local users to access the X session by listing the process and its arguments...
CVE-2009-1756
CVE-2009-1756 affects SLiM Simple Login Manager 1.3.0. The X authority mcookie is placed on the command line when invoking xauth from app.cpp and switchuser.cpp, enabling a local attacker to view the process and its arguments and potentially access the X session. The issue is described in the ini...
slim -- local disclosure of X authority magic cookie
Secunia reports: A security issue has been reported in SLiM, which can be exploited by malicious, local users to disclose sensitive information. The security issue is caused due to the application generating the X authority file by passing the X authority cookie via the command line to "xauth"...
Unfixed XSS vulnerability at www.kronofogden.se
Security researcher DellNull, has submitted on 15/05/2009 a cross-site-scripting XSS vulnerability affecting www.kronofogden.se, which at the time of submission ranked 159295 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is...
Do we really need a cybersecurity czar?
The back-and-forth in Washington over who should run the cybersecurity program for the federal government has reached a fever pitch, as lawmakers, federal agencies and other interested parties jockey for position and budget dollars in the run-up to the release of the results of the Obama...
Battle brewing over cybersecurity in Washington
There is a good old-fashioned backroom brawl shaping up in Washington over the cybersecurity issue, and the forces are aligning in some interesting ways on a variety of different sides of the debate. The latest installment in this long-running drama involves not just the fight over which, if any,...
Ubuntu: Security Advisory (USN-740-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-740-1: NSS vulnerability
The MD5 algorithm is known not to be collision resistant. This update blocklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/...
Demium CMS 0.2.1B Multiple Vulnerabilities and Exploit
No description provided by source. Demium CMS, version 0.2.1 Beta, is prone to multiple remote vulnerabilities, because of insufficient security on it. Let's see them. In this advisory you can find vulnerabilities, afflicted source, and multiple Remote Exploit. Credits to : Giovanni Buzzin, Osiry...
Demium CMS 0.2.1 Beta LFI / SQL Injection / Disclosure
Demium CMS, version 0.2.1 Beta, is prone to multiple remote vulnerabilities, because of insufficient security on it. Let's see them. In this advisory you can find vulnerabilities, afflicted source, and multiple Remote Exploit. Credits to : Giovanni Buzzin, Osirys Contact : osirysatautisticidotorg...
Demium CMS 0.2.1B Multiple Vulnerabilities and Exploit
Exploit for unknown platform in category web applications ====================================================== Demium CMS 0.2.1B Multiple Vulnerabilities and Exploit ====================================================== Demium CMS, version 0.2.1 Beta, is prone to multiple remote vulnerabilitie...
Demium CMS 0.2.1b - Multiple Vulnerabilities
Demium CMS 0.2.1b - Multiple Vulnerabilities Demium CMS, version 0.2.1 Beta, is prone to multiple remote vulnerabilities, because of insufficient security on it. Let's see them. In this advisory you can find vulnerabilities, afflicted source, and multiple Remote Exploit. Credits to : Giovanni...
Demium CMS 0.2.1b - Multiple Vulnerabilities
Demium CMS, version 0.2.1 Beta, is prone to multiple remote vulnerabilities, because of insufficient security on it. Let's see them. In this advisory you can find vulnerabilities, afflicted source, and multiple Remote Exploit. Credits to : Giovanni Buzzin, Osirys Contact : osirysatautisticidotorg...
Code injection
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...
UBUNTU-CVE-2008-4392
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...
DEBIAN-CVE-2008-4392
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority SOA query...
Cisco Unified Communications Manager DoS
Certificate Authority Proxy Function service DoS TCP/3804...
DNS BailiWicked Host Attack
No description provided by source. /msf3/msfconsole require 'msf/core' require 'net/dns' require 'scruby' require 'resolv' module Msf class Auxiliary::Spoof::Dns::BailiWickedHost Msf::Auxiliary include Exploit::Remote::Ip def initializeinfo = superupdateinfoinfo, 'Name' = 'DNS BailiWicked Host...