CVE-2008-4416

HP-UX kernel vulnerability CVE-2008-4416 affects HP-UX B.11.31; local users can cause a denial of service via unspecified vectors. Patch PHKL_38987 (or later) resolves the issue per HP Security Bulletin HPSBUX02389; corroborated by OpenVAS and related sources. No exploitation details are provided...

[security bulletin] HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01615952 Version: 1 HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date:...

Sql injection

SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parameter to a-b-membres.php. NOTE: the goodies.php vector is already covered by CVE-2007-4808. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

Unfixed Frame Redirect vulnerability at www.triple-b-events.nl

Security researcher SaMTHG, has submitted on 25/10/2008 a Frame Redirect vulnerability affecting www.triple-b-events.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currently unfixe...

The remote host is infected by a virus

This script checks for the presence of different virii on the remote host, by using the SMB credentials you provide the scanner with. SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Design/Logic Flaw

Unspecified vulnerability in NFS / ONCplus B.11.3104 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors...

DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC

No description provided by source. / deslock-probe-read.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel DoS POC by mu-b - Sat 19 Jul 2008 - Tested on: DLMFENC.sys 1.0.0.28 call to ProbeForRead with a user-definable address that is eventually overwritten should have been...

DESlock+ <= 3.2.7 Local Kernel Overflow PoC

No description provided by source. / deslock-overflow.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel overflow POC by mu-b - Sat 23 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 http://www.cctmark.gov.uk/CCTMAwards/DataEncryptionSystemsLtd/tabid/103/Default.aspx - I wonder wh...

DESlock+ < 3.2.7 - Local Kernel Overflow (PoC)

/ deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq r...

DESlock+ 3.2.7 - Local Kernel Overflow (PoC)

DESlock+ 3.2.7 - Local Kernel Overflow PoC / deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20;...

AssetMan 2.5-b - SQL Injection using Session Fixation

============================================================ AssetMan v2.5-b SQL Injection using Session Fixation Attack ============================================================ ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '. :: :; ;: :: ; :;. ,;: :: :; :;: ,;" :: ::. ':; ..,.; ;...

AssetMan v2.5-b SQL Injection using Session Fixation Attack

Exploit for unknown platform in category web applications =========================================================== AssetMan v2.5-b SQL Injection using Session Fixation Attack =========================================================== ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE HTTP POST请求拒绝服务漏洞

BUGTRAQ ID: 30988 CNCAN ID：CNCAN-2008090401 3Com Wireless 8760 Dual Radio 11a/b/g PoE是一款企业级网线访问接入点设备。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE WEB接口处理HTTP POST请求存在问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 WEB管理接口不正确处理畸形HTTP POST请求，可导致应用程序崩溃，造成拒绝服务攻击。 3Com Wireless 8760 Dual-Radio 11a/b/g PoE 目前没有解决方案提供：...

HP System Management Homepage (SMH) 'message.php'跨站脚本漏洞

BUGTRAQ ID:30846 CNCAN ID：CNCAN-2008082702 HP System Management Homepage是一款HP公司发布的系统管理主页。 HP System Management Homepage不正确处理用于显示通用错误消息的输入参数，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息。 漏洞影响"message.php"脚本，此页面使用JavaScript属性"location.search"用于建立错误消息，如URL中提供的错误ID不匹配任何合法的代码，通用错误会报告"An unknown error %INVALIDCODE%...

[security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01525562 Version: 1 HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

CVE-2008-1668

CVE-2008-1668 affects HP-UX ftpd (HP-UX B.11.11) and wu-ftpd-based ftpd included with HP-UX. The issue arises when PAM authentication can succeed even if getpwnam returns NULL, allowing remote attackers to gain privileges by logging in as an LDAP user under certain misconfigurations of nsswitch.c...

Unfixed XSS vulnerability at www.ag-partsnet.com

Security researcher B, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.ag-partsnet.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Code injection

Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors...

HP-UX System Administration Manager NFS配置安全绕过漏洞

BUGTRAQ ID: 30449 CVE ID：CVE-2008-1662 CNCVE ID：CNCVE-20081662 HP-UX是一款商业性质的操作系统。 HP-UX SAM应用程序可为NFS提供不可期的配置，远程攻击者可以利用漏洞绕过部分安全限制，访问受影响的电脑。 目前没有详细漏洞细节提供。 HP-UX B.11.23 HP-UX B.11.11 可参考如下安全公告获得补丁信息：...

kernel security and bug fix update

2.6.9-67.0.22.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...