DSA-1271-1 openafs - design error

Bulletin has no description...

Comodo Firewall 2.32.4 - Flawed Component Control Cryptographic Hash

Comodo Firewall 2.32.4 - Flawed Component Control Cryptographic Hash source: https://www.securityfocus.com/bid/22570/info Comodo Firewall is prone to a design error in its cryptographic hashing function for component controls. Exploiting this flaw permits attackers to bypass the application's...

iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability

Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability iDefense Security Advisory 02.13.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 13, 2007 I. BACKGROUND Hewlett-Packard's HP-UX introduced "Single Logical Screen" SLS in 1995 to facilitate using multiple graphics devic...

Comodo Firewall 2.3/2.4 - Flawed Component Control Cryptographic Hash

source: https://www.securityfocus.com/bid/22570/info Comodo Firewall is prone to a design error in its cryptographic hashing function for component controls. Exploiting this flaw permits attackers to bypass the application's component controls. The application keeps a list of process-module...

Comodo Firewall CMDMon.SYS多个拒绝服务漏洞

Comodo Firewall Pro是一款防火墙应用程序。 Comodo Firewall Pro存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Comodo Firewall Pro在SSDT中HOOK多个函数，但缺少对来自用户模式中的参数数据，用户使用非法的参数调用NtConnectPort CFP 2.4.16.174不受影响, NtCreatePort CFP 2.4.16.174不受影响, NtCreateSection, NtOpenProcess, NtOpenSection, NtOpenThread...

X-Kryptor Secure Client特权提升漏洞

X-Kryptor是一款多功能动态VPN产品，允许安全访问。 X-Kryptor Secure Client存在设计错误，本地攻击者可以利用漏洞提升特权，获得SYSTEM权限。 X-Kryptor Xgntr BMS1351 X-Kryptor X-Kryptor Driver BMS1446HRR X-Kryptor Install BMS1472 升级程序： X-Kryptor X-Kryptor Driver BMS1446HRR X-Kryptor xkpatch462660.zip...

Vote! Pro 4.0 - Multiple PHP Code Execution Vulnerabilities

Vote! Pro 4.0 - Multiple PHP Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/22191/info Multiple VoIP phones using the Aredfox PA168 Chipset are prone to a session-hijacking vulnerability due to a design error. An attacker can exploit this issue to gain administrative...

Rixstep Undercover - Local Privilege Escalation

// source: https://www.securityfocus.com/bid/22071/info Rixstep Undercover is prone to a local privilege-escalation vulnerability because of a design error in the affected application. An attacker can exploit this issue to execute arbitrary code with superuser privileges, completely compromising...

Sun Solaris Syslog本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在设计错误，本地攻击者可以利用漏洞关闭syslog3c功能，导致消息不能记录。 Sun Solaris 10.0 x86 Sun Solaris 10.0 Sun Solaris 9.0 x86 Sun Solaris 9.0 Sun Solaris 8.0 x86 Sun Solaris 8.0 un Solaris 10.0 Sun Sun Patch ID: 118833-19...

GLSA-200612-03 : GnuPG: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200612-03 GnuPG: Multiple vulnerabilities Hugh Warrington has reported a boundary error in GnuPG, in the 'askoutfilename' function from openfile.c: the makeprintablestring function could return a string longer than expected...

GnuPG: Multiple vulnerabilities

Background The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software. Description Hugh Warrington has reported a boundary error in GnuPG, in the "askoutfilename" function from openfile.c: the makeprintablestring function could return a string longer than...

kronolith -- arbitrary local file inclusion vulnerability

iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...

Solaris 10 libnspr LD_PRELOAD Arbitrary File Creation Local Root Exploit

No description provided by source. !/bin/sh $Id: raptorlibnspr2,v 1.4 2006/10/16 11:50:48 raptor Exp $ raptorlibnspr2 - Solaris 10 libnspr LDPRELOAD exploit Copyright c 2006 Marco Ivaldi [email protected] Local exploitation of a design error vulnerability in version 4.6.1 of NSPR, as include...

Debian DSA-969-1 : scponly - design error

Max Vozeler discovered a vulnerability in scponly, a utility to restrict user commands to scp and sftp, that could lead to the execution of arbitrary commands as root. The system is only vulnerable if the program scponlyc is installed setuid root and if regular users have shell access to the...

Debian DSA-884-1 : horde3 - design error

Mike O'Connor discovered that the default installation of Horde3 on Debian includes an administrator account without a password. Already configured installations will not be altered by this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Debian DSA-910-1 : zope.2.7 - design error

A vulnerability has been discovered in zope 2.7, an Open Source web application server, that allows remote attackers to insert arbitrary files via include directives in reStructuredText functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-1000-2 : libapreq2-perl - design error

Gunnar Wolf noticed that the correction for the following problem was not complete and requires an update. For completeness we're providing the original problem description : An algorithm weakness has been discovered in Apache2::Request, the generic request library for Apache2 which can be...

Debian DSA-1102-1 : pinball - design error

Steve Kemp from the Debian Security Audit project discovered that pinball, a pinball simulator, can be tricked into loading level plugins from user-controlled directories without dropping privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (1)

Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation 1 source: https://www.securityfocus.com/bid/20471/info The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability. A successful exploit of this iss...

Solaris 10 (libnspr) Arbitrary File Creation Local Root Exploit

No description provided by source. !/bin/sh $Id: raptorlibnspr,v 1.1 2006/10/13 19:12:12 raptor Exp $ raptorlibnspr - Solaris 10 libnspr oldschool local root Copyright c 2006 Marco Ivaldi [email protected] Local exploitation of a design error vulnerability in version 4.6.1 of NSPR, as includ...