sendmail security update

CentOS Errata and Security Advisory CESA-2007:0252 Updated sendmail packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Sendmail is a very widely used...

RHEL 4 : util-linux (RHSA-2007:0235)

An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...

RHEL 4 : openssh (RHSA-2007:0257)

Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files necessary for...

RHEL 4 : sendmail (RHSA-2007:0252)

Updated sendmail packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Sendmail is a very widely used Mail Transport Agent MTA. MTAs deliver mail from on...

Low: Red Hat Security Advisory: cpio security and bug fix update

An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platform...

eXtremail 2.1.1 - DNS Parsing Bugs Remote (PoC)

eXtremail 2.1.1 - DNS Parsing Bugs Remote PoC / extremail-v9.c Copyright c 2007 by eXtremail include include include include include define DNSHDRLEN 12 define DNSTRAILLEN 20 define DNSPORT 53 define DNSMAXMSG 0x200 define HAMMERLEN 284 static char dnshdrbuf = "\x69\x69" / transaction id /...

eXtremail 2.1.1 - DNS Parsing Bugs Remote (PoC)

/ extremail-v9.c Copyright c 2007 by eXtremail include include include include include define DNSHDRLEN 12 define DNSTRAILLEN 20 define DNSPORT 53 define DNSMAXMSG 0x200 define HAMMERLEN 284 static char dnshdrbuf = "\x69\x69" / transaction id / "\x81\x80" / flags / "\x00\x01" / questions /...

waraxe-2007-SA-048.txt

waraxe-2007-SA048 - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke Author: Janek Vind "waraxe" Date: 13. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-48.html Target software description: VWar module for PhpNuke http://www.vwar.de/ VWar is a webbased...

[waraxe-2007-SA#048] - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke

waraxe-2007-SA048 - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke Author: Janek Vind "waraxe" Date: 13. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-48.html Target software description: VWar module for PhpNuke http://www.vwar.de/ VWar is a webbased...

Microsoft Office Word 2007 Multiple Vulnerabilities

No description provided by source. Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: ...

Microsoft Word 2007 - Multiple Vulnerabilities

Microsoft Word 2007 - Multiple Vulnerabilities Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results:...

[Full-disclosure] Some 0day Pocs

Mati Aharoni muts .@. offensive-security.com mailto:[email protected] http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.d...

Microsoft Office Word 2007 Multiple Vulnerabilities

Exploit for unknown platform in category dos / poc =================================================== Microsoft Office Word 2007 Multiple Vulnerabilities =================================================== Mati Aharoni muts email protected offensive-security.com http://www.offensive-security.com...

Microsoft Word 2007 - Multiple Vulnerabilities

Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.doc - Unspecified Overflow in word...

CVE-2007-1724

Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures...

Design/Logic Flaw

Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures...

CVE-2007-1724

Technical details about CVE-2007-1724 are not publicly provided in the supplied documents; the connected sources describe an unspecified ReactOS vulnerability with unknown impact and no concrete vectors. Monitor for updates.

CVE-2007-1724

Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures...

C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...

Advisory - Redirection Vulnerability in wp-login.php.

Vendor ------ Wordpress http://www.wordpress.org. Severity -------- Moderate. Dated ----- 03 March 2007. Versions Affected ----------------- All. Issue ----- The wp-login.php page redirects a user to arbitrary page after successful login by setting the redirectto url parameter. For example if a...