EMC RepliStor远程堆溢出漏洞

BUGTRAQ ID: 27915 CVECAN ID: CVE-2008-6426 EMC RepliStor是实时容灾备份解决方案。 EMC RepliStor处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 EMC RepliStor中负责执行压缩的代码未经考虑目标缓冲区的大小便解压了数据，这可能触发堆溢出，导致以RepliStor Server或Control Server的权限（通常为SYSTEM）执行任意指令。攻击者无需认证便可以触发这些漏洞，但必须要能够连接到目标服务器的TCP 7144或7145端口。 EMC RepliStor 6.2 SP2 厂商补丁：...

ASP database plug horse small conference-vulnerability warning-the black bar safety net

By lake2 （ http://lake2.0x54.org ） With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for?...

DSA-1471-1 libvorbis - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 752-1 (gzip)

The remote host is missing an update to gzip announced via advisory DSA 752-1. Two problems have been discovered in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems. CVE-2005-0988 Imran Ghory discovered a race condition in the...

Debian Security Advisory DSA 122-1 (zlib, various)

The remote host is missing an update to zlib, various announced via advisory DSA 122-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-763-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1026-1 (sash)

The remote host is missing an update to sash announced via advisory DSA 1026-1. Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. A...

Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily

Info: Software: Binn SBuilder HomePage: http://www.cms.ge/ Exploit: Blind Sql Injection High Where: fulltext.php?nid= Bug Found By: JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Dork: "Powered by CMS.GE" Dork2: priv8! + Important tables and columns: Tables: Table:...

binn-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Binn SBuilder nid Remote Blind Sql Injection Vulnerabily +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

Binn SBuilder - 'nid' Blind SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Binn SBuilder nid Remote Blind Sql Injection Vulnerabily +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

Binn SBuilder - nid Blind SQL Injection

Binn SBuilder - nid Blind SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Binn SBuilder nid Remote Blind Sql Injection Vulnerabily +==-- --==+====================================================================================+==-- ...

blakord-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = 0 Exploit2: http://localhost/path/any module?id=1 and exists select from TABLE Example: http://localhost/path/any module?id=1 AND SELECT Count FROM users = 0 Example2:...

Blakord Portal Beta 1.3.A (All Modules) - SQL Injection

Blakord Portal Beta 1.3.A All Modules - SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = 0 Exploit2: http://localhost/path/any module?id=1 and exists select from TABLE Example: http://localhost/path/any module?id=1 A...

ClamAV 'libclamav/pe.c' MEW压缩PE文件整数溢出漏洞

ClamAV是一款流行的反病毒应用程序。 Clam AntiVirus解析MEW压缩成的PE文件存在整数溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能导致任意代码执行。 在处理此PE文件时，两可不可信的值直接来自文件而没有任何检查，这些值之后用于算术运算来计算要分配的堆缓冲区，此计算可导致整数溢出，可能以应用程序进程权限执行任意指令。 Clam Anti-Virus ClamAV 0.91.2 升级程序： Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.92...

JVN#82610488 Lhaplus buffer overflow vulnerability

Lhaplus, file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user decompresses a specially crafted file, an attacker could execute arbitrary code with the privilege of the user. This vulnerability is different from...

FLAC libFLAC Multiple Buffer Overflows (CVE-2007-4619)

Free Lossless Audio Codec FLAC is a file format designed for audio data compression. LibFLAC is the FLAC project library embedded in various products. A buffer overflow vulnerability has been reported in the FLAC. A remote attacker can exploit this vulnerability via a specially crafted FLAC file...

[SECURITY] Fedora Core 6 Update: libpng-1.2.10-10.fc6

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

zlib compression library DoS

DoS on invalid data stream including ones of PNG files...

[SECURITY] Fedora 7 Update: tar-1.15.1-28.fc7

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

Bbsxp 2 0 0 7[previous version don't know]an interesting vulnerability-vulnerability warning-the black bar safety net

| cpmpact. asp % option explicit Const JET3X = 4 if ""&Request"sessionid"&""""&session. sessionid&"" then error"validation code error" Dim dbpath,boolIs97 dbpath = Request"dbpath" boolIs97 = Request"boolIs97" If dbpath "" Then dbpath = server. mappathdbpath response. writeCompactDBdbpath,boolIs97...