PT-2012-3958

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 1.6.1 Description The issue allows remote attackers to execute arbitrary SQL commands via the serendipityplugin to conf parameter in the serendipity admin.php file. This might be related to cross-site request...

sudo: insecure temporary file use in RPM %postun script

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux RHEL 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file...

PT-2012-4713 · Red Hat +1 · Red Hat +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 5 with sudo version 1.7.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file. This is related to a certain Red Hat script...

Scientific Linux Security Update : cifs-utils on SL6.x i386/x86_64 (20120620)

The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker...

Scientific Linux Security Update : yum-conf on SL3.x i386/x86_64

yum-conf changes are needed for the transition of SL 3 into legacy mode. Changes from the old yum-conf The files /etc/yum.conf and /etc/cron.daily/yum.cron are not marked as 'noreplace'. This means that if you have modified /etc/yum.conf or /etc/cron.daily/yum.cron, your version will be saved as...

CentOS 6 : cifs-utils (CESA-2012:0902)

An updated cifs-utils package that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

PT-2012-4194

Name of the Vulnerable Software and Affected Versions Drupal Advertisement module versions 6.x-2.x before 6.x-2.3 Description A cross-site scripting XSS issue exists in the Advertisement module for Drupal. This occurs when debug mode is enabled, allowing remote attackers to inject arbitrary web...

PT-2012-1130

Name of the Vulnerable Software and Affected Versions libgssglue versions prior to 0.4 libgssapi versions prior to 0.4 Description The issue concerns a problem with privilege checking in libgssapi and libgssglue, which can be exploited locally. This can lead to the execution of arbitrary code via...

Fedora 16 : cifs-utils-5.4-1.fc16 (2012-6375)

This updates the cifs-utils package to version 5.4, which contains a number of bugfixes and enhancements. Highlights include : - mount.cifs now supports the -s option by passing 'sloppy' to the kernel in the options string - cifs.upcall now properly respects the domainrealm section in krb5.conf -...

PT-2012-3127

Name of the Vulnerable Software and Affected Versions Nova CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via a URL in several parameters, including the fileType parameter to "optimizer/index.php", the id...

[SECURITY] [DSA 2365-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2365-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2011 http://www.debian.org/security/faq -...

CentOS Update for samba CESA-2009:1529 centos4 i386

Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2009:1529 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

websudo does not work with Confluence when it's integrated with Crowd SSO

h5. Steps to reproduce Integrate with Crowd with SSO|http://confluence.atlassian.com/display/DOC/Connecting+to+Crowd+or+JIRA+for+User+Management Go to Confluence Admin, it does not prompt to enter password websudo Go to Security Configuration. Note that it will look something like this:...

Atlassian's Confluence Cross Site Scripting

A while back I reported some bugs in Atlassian's Confluence. As everyone should have upgraded by now I feel that I can now release my proof of concept for CONF-21508 and CONF-21819. note - I uncovered and reported these bugs at different times. Issue 1 CONF-21508: the document macro did not...

PT-2011-1682

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...

MultiCMS Local File Inclusion

=============================wwwdotWhiteponnydotcom============================= Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File Inclusion Vulnerbility Vendor: http://www.multicms.net Status: FIXED Tested on: Windows 7 Dork: "Redakcní systém MultiCMS" Mail:...

MultiCMS - Local File Inclusion

Source: http://packetstormsecurity.org/files/view/97987/multicms-lfi.txt =============================wwwdotWhiteponnydotcom============================= Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File Inclusion Vulnerbility Vendor: http://www.multicms.net Status: FIXED Test...

MultiCMS - Local File Inclusion

MultiCMS - Local File Inclusion Source: http://packetstormsecurity.org/files/view/97987/multicms-lfi.txt =============================wwwdotWhiteponnydotcom============================= Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File Inclusion Vulnerbility Vendor:...

PT-2011-2521

Name of the Vulnerable Software and Affected Versions phpLD version 4.1.0 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action. This occurs in the admin/conf use...

PT-2010-1170

Name of the Vulnerable Software and Affected Versions ettercap affected versions not specified Description The issue is related to the gtkui conf read function in the src/interfaces/gtk/ec gtk conf.c component of the ettercap tool, which is used for protection against MITM attacks in LAN. The...