MS02-012: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail (313450)

The remote host contains a flaw in its SMTP service that could allow an attacker to crash it. Vulnerable services are SMTP service Windows XP/Windows 2000 and Exchange 2000 Windows 2000. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20885; scriptversion"1.29";...

getID3 < 1.7.8-b1 Multiple Remote Vulnerabilities

getID3, a web-based tool for extracting information from MP3 files, is installed on the remote web server. The installation of getID3 includes a set of demo scripts that allow an unauthenticated, remote attacker to read and delete arbitrary files, write files with some restrictions, and execute...

MS07-005: Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723)

The remote host is running a version of Microsoft Step-by-Step Interactive Training that contains a flaw that could lead to remote code execution. To exploit this flaw, an attacker would need to trick a user on the remote host into opening a malformed file with the affected application. Tenable...

MySQL privilege elevation and security restrictions bypass vulnerability-vulnerability warning-the black bar safety net

Affected systems: MySQL AB MySQL = 5.1.10 Description: BUGTRAQ ID: 1 9 5 5 9 MySQL is a very widely used open source relational database system, with a variety of platforms running version. In MySQL, have access but no permission to create users can be created with the Access database only the na...

[SECURITY] [DSA 1200-1] New Qt packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1200-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 30, 2006 - ------------------------------------------------------------------------ Package : qt-x11-free...

AIX 5.1 Bellmail Local Race Condition Exploit (Instructions w/ Exploit)

No description provided by source. -bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfi...

[SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 1166-1 [email protected] http://www.debian.org/security/ Steve Kemp September 3rd, 2006 http://www.debian.org/security/faq -...

POC &amp; exploit for Apache mod_rewrite off-by-one

Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CERT advisory: VU395412 Severity: high Introduction ---- On July 28 2006 Mark Dowd McAfee Avert Labs reported a vulnerability found in modrewrite apache module to the bugtraq...

[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...

Linux Kernel Sysctl接口注销本地拒绝服务漏洞

BUGTRAQ ID: 15365 CVECAN ID: CVE-2005-2709 Linux kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"sysctl.c"在"/proc/sys/net/ipv4/conf/"中处理接口注销时存在拒绝服务漏洞。恶意用户可以利用这个漏洞导致系统忙碌，造成服务不可用。 Linux kernel 2.6.14.1 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Linux Upgrade linux-2.6.14.1.tar.bz2...

[SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1077-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1076-1] New lynx packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1076-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1071-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1055-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1049-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1019-1] New kpdf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1019-1 [email protected] http://www.debian.org/security/ Martin Schulze March 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1010-1 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 994-1] New freeciv packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 994-1 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 994-1] New freeciv packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 994-1 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 991-1] New zoo packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 991-1 [email protected] http://www.debian.org/security/ Steve Kemp March 10th, 2006 http://www.debian.org/security/faq -...