GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow

/ wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when parsing input either from the "-e" or "-l" flags,...

Subversion Client/Server Detection (Windows)

Subversion, an open source version control system, is installed on the remote system. Subversion can be installed on Windows using CollabNet-certified binaries or through third-party packages such as VisualSVN, TortoiseSVN, and SlikSVN. Third-party packages typically include CollabNet binaries in...

MDKA-2007:108 : kdetoys

The kdetoys package, as released with Mandriva Linux 2008.0, missed some binaries required by the KWeather Kicker applet, preventing KWeather to be used. This update package fixes the issue by installing the missing binaries. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as th...

F-PROT Antivirus: Multiple Denial of Service vulnerabilities

Background F-PROT Antivirus is a multi-platform virus scanner for workstations and mail servers. Description The following vulnerabilities were found: Multiple errors when processing UPX, ASPack or Microsoft Office files CVE-2008-3243. Infinite Sergio Alvarez of n.runs AG reported an invalid memo...

Mandriva Update for kdetoys MDKA-2007:108 (kdetoys)

Check for the Version of kdetoys OpenVAS Vulnerability Test Mandriva Update for kdetoys MDKA-2007:108 kdetoys Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

eXeScope 6.50 Buffer Overflow

!/usr/bin/perl eXeScope 6.50 Local Buffer Overflow Exploit Download eXeScope 6.50 at: http://hp.vector.co.jp/authors/VA003525/eXeSc650.zip Exploit by: Koshi [email protected] use strict; use warnings; my $headers = "\x4D\x5A\x90\x00\x03\x00\x00\x00\x04\x00\x00\x00\xFF\xFF\x00\x00"...

Fedora Update for file FEDORA-2007-0836

Check for the Version of file OpenVAS Vulnerability Test Fedora Update for file FEDORA-2007-0836 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for file FEDORA-2007-541

Check for the Version of file OpenVAS Vulnerability Test Fedora Update for file FEDORA-2007-541 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CORE-2008-1009 - VNC Multiple Integer Overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ VNC Multiple Integer Overflows 1. Advisory Information Title: VNC Multiple Integer Overflows Advisory ID: CORE-2008-1009 Advisory URL:...

USN-700-2: Perl regression

USN-700-1 fixed vulnerabilities in Perl. Due to problems with the Ubuntu 8.04 build, some Perl .ph files were missing from the resulting update. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jonathan Smith discovered that the Archive::Tar Perl modul...

HTTP Backdoor Detection deprecated

This plugin has been deprecated and replaced by plugin 71024 Web Site Hosting Malicious Binaries. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2019/01/09. Deprecated by wwwhostingmalware.nbin. include"compat.inc"; ifdescription scriptid35322; scriptversion "1.11"; scriptcvsdate"Date:...

FreeBSD Ports: p5-File-Path

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

kernel: linux x86_64 ia32 emulation leaks uninitialized data

Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary...

Debian: Security Advisory (DSA-1678-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1678-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 03, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1678-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 03, 2008 http://www.debian.org/security/faq -...

DEBIAN-CVE-2008-5302

Race condition in the rmtree function in File::Path 1.08 and 2.07 lib/File/Path.pm in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error...

CVE-2008-5302

Race condition in the rmtree function in File::Path 1.08 and 2.07 lib/File/Path.pm in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error...

Race condition

Race condition in the rmtree function in File::Path 1.08 and 2.07 lib/File/Path.pm in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error...

CVE-2008-5302

Race condition in the rmtree function in File::Path 1.08 and 2.07 lib/File/Path.pm in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error...