3COM OfficeConnect routers multiple security vulnerabilities

Backdoor accounts, password stored in clear text, code execution...

Directory traversal

Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3535

Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect...

CVE-2009-3538

Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Directory traversal

Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect...

CVE-2009-3535

Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect...

CVE-2009-3538

Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3535

CVE-2009-3535 affects Clear Content 1.1, specifically the image.php component. The vulnerability is a directory traversal issue that allows a remote attacker to read arbitrary files by supplying a ... in the URL parameter. The linked connected records do not provide concrete details beyond this d...

CVE-2009-3538

CVE-2009-3538 describes a directory traversal vulnerability in Thumb.php (Clear Content 1.1) that lets remote attackers read arbitrary files via a .. in the URL parameter. Affected component: Thumb.php in Clear Content 1.1; root cause: improper sanitization of the URL path enabling directory trav...

CVE-2009-3535: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect...

CVE-2009-3538: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

kernel: execve: must clear current->clear_child_tid

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clearchildtid pointer, which allows local users to cause a denial of service memory corruption or possibly gain privileges via a clone system call with CLONECHILDSETTID or...

Camfrog.com SQL Injection

Camfrog.com suffers from a remote SQL injection vulnerability Millions of accounts are exposed Vulnerable parameter: popular.php?orderby=&st=dir&r=&cg= Available database: informationschema, cf, cfgift, cfimage, cfonline Users password are in CLEAR TEXT !!! More on...

Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier

First after logging onto the console either pnlog mailto, or pnlog scpto will send the logs off of the box to a destination you specify, you can also display the logs using pnlog show. pnadmin$ pnlog scpto [email protected]:/home/ryan scp /tmp/error-logs.tar.gz...

kernel security and bug fix update

2.6.9-89.0.7.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

DVbbs 8.2 background storm catalog file vulnerability-vulnerability warning-the black bar safety net

DVbbs 8.2 background storm catalog file vulnerability As long as you know the directory name can Select‘File Management’Point below the beginning of the search In the following‘need to clean up the Upload Directory’section of the write into the directory as ‘../admin’ ‘../data’ Point ‘clear bit...

S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service

S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service source: https://www.securityfocus.com/bid/35762/info S.T.A.L.K.E.R. Clear Sky is prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully...

S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service

source: https://www.securityfocus.com/bid/35762/info S.T.A.L.K.E.R. Clear Sky is prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames. Successfully exploiting this issue allows remote attackers to crash the...