Sun Microsystems Solaris SRSEXEC 3.2.x - Arbitrary File Read Local Information Disclosure

source: https://www.securityfocus.com/bid/23915/info Sun Microsystems Solaris is prone to a local information-disclosure vulnerability due to a design error. A local attacker may exploit this issue to access sensitive information, including superuser password information, that may lead to further...

iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability

VMware Workstation Shared Folders Directory Traversal Vulnerability iDefense Security Advisory 04.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 27, 2007 I. BACKGROUND VMware Workstation is a software virtualization system which allows multiple virtual computers to run on a sing...

ManageEngine Password Manager Pro Build 5401 - Database Remote Unauthorized Access

source: https://www.securityfocus.com/bid/23693/info ManageEngine Password Manager Pro is prone to a remote unauthorized-access vulnerability due to a design error. An attacker may leverage this issue to gain unauthorized access to the application's database with administrative privileges...

ManageEngine Password Manager Pro Build 5401 - Database Remote Unauthorized Access

ManageEngine Password Manager Pro Build 5401 - Database Remote Unauthorized Access source: https://www.securityfocus.com/bid/23693/info ManageEngine Password Manager Pro is prone to a remote unauthorized-access vulnerability due to a design error. An attacker may leverage this issue to gain...

iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability

Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability iDefense Security Advisory 04.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-ware...

iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities

Apache HTTPD suEXEC Multiple Vulnerabilities iDefense Security Advisory 04.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 11, 2007 I. BACKGROUND The suexec binary is a helper application which is part of the Apache HTTP server package. It is designed to allow a script to run wit...

CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability

Shirkdog Security Advisory SHK-004 Title: ------ Computer Associates CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability Description of Application: --------------------------- http://www3.ca.com/solutions/ProductFamily.aspx?ID=115 Brightstor ARCserv Backup provides a complete, flexible a...

PHP 5.2.1 - Multiple functions Reference Information Disclosures

PHP 5.2.1 - Multiple functions Reference Information Disclosures source: https://www.securityfocus.com/bid/23202/info PHP is prone to an information-disclosure vulnerability due to a design error. The vulnerability resides in various functions that accept parameters as references. Successful...

TrueCrypt Dismount Set-EUID本地拒绝服务漏洞

TrueCrypt是一款免费开源虚拟加密盘加密软件。 TrueCrypt存在设计错误，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 本地攻击者可以卸挂其他用户挂接的驱动盘，导致拒绝服务攻击。目前没有详细漏洞细节提供。 TrueCrypt TrueCrypt 4.2 TrueCrypt TrueCrypt 4.1 TrueCrypt TrueCrypt 4.0 TrueCrypt TrueCrypt 3.0 升级到最新程序： http://www.truecrypt.org/docs/?s=version-history...

PHP 5.2.1 - Multiple functions 'Reference' Information Disclosures

source: https://www.securityfocus.com/bid/23202/info PHP is prone to an information-disclosure vulnerability due to a design error. The vulnerability resides in various functions that accept parameters as references. Successful exploits will allow attackers to obtain sensitive information...

CA BrightStor Backup 11.5.2.0 (Mediasvr.exe) Remote Code Exploit

Exploit for unknown platform in category remote exploits ================================================================ CA BrightStor Backup 11.5.2.0 Mediasvr.exe Remote Code Exploit ================================================================ !/usr/bin/python Computer Associates CA...

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Remote Code

!/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe Remote Code Exploit Previously Unknown There seems to be an design error in the handling of RPC data with xdr procedures across several .dll's imported by Mediasvr.exe. Four bytes from an RPC packet are processed as a particul...

ManageEngine Firewall Analyzer任意文件信息泄露漏洞

ManageEngine Firewall Analyzer是一款防火墙分析程序。 ManageEngine Firewall Analyzer存在设计错误，远程攻击者可以利用漏洞获得敏感信息。 授权用户使用"firewall analyzer"可以访问任何系统文件，可导致获得敏感信息。 ManageEngine Firewall Analyzer 4 目前没有详细解决方案提供： http://manageengine.adventnet.com/...

PHP 5.2.1 - Session.Save_Path() TMPDIR open_basedir Restriction Bypass

PHP 5.2.1 - Session.SavePath TMPDIR openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/23183/info PHP is prone to a 'openbasedir' restriction-bypass vulnerability due to a design error. Successful exploits could allow an attacker to access sensitive information or to write...

PHP 5.2.1 - 'Session.Save_Path()' TMPDIR open_basedir Restriction Bypass

source: https://www.securityfocus.com/bid/23183/info PHP is prone to a 'openbasedir' restriction-bypass vulnerability due to a design error. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations. This vulnerability would be an issu...

Debian DSA-1271-1 : openafs - design error

A design error has been identified in the OpenAFS, a cross-platform distributed filesystem included with Debian. OpenAFS historically has enabled setuid filesystem support for the local cell. However, with its existing protocol, OpenAFS can only use encryption, and therefore integrity protection,...

iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability

Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability iDefense Security Advisory 03.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 23, 2007 I. BACKGROUND Sun Java System Directory Server is an LDAP server distributed by Sun with multiple...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

Microsoft Windows Vista - Windows Mail Local File Execution

source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link...

[SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug

------------------------------------------------------------------------ Debian Security Advisory DSA-1271-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 20, 2007 - ------------------------------------------------------------------------ Package : openafs Vulnerability...