2149 matches found
PHP 3/4/5 - ZendEngine Variable Destruction Remote Denial of Service
source: https://www.securityfocus.com/bid/22764/info PHP is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker who can run PHP code on a vulnerable computer may exploit this vulnerability to crash PHP and the webserver, denying servic...
GNU Ed不安全临时文件建立漏洞
GNU ed是一个8字节适用、POSIX 兼容的行编辑器。 GNU ed不正确建立临时文件，本地攻击者可以利用漏洞进行拒绝服务或提升特权攻击。 由于不安全建立临时文件，通过符号攻击，可导致以当前用户权限破坏系统文件，或者提升为当前用户特权。 GNU Ed 可联系供应商获得补丁信息： http://www.gnu.org/software/ed/ed.html...
Do a good Defense: virus destroy hardware there are seven large-loss trick-vulnerability warning-the black bar safety net
CIH virus has turned everyone's panic, set off no small waves. Previous various virus only up to destroy hard drive data, and CIH was able to invade the on-Board Flash BIOS, the destruction of its contents and to make the Board scrapped. CIH lesson tells us:do not despise viruses to hardware...
Be careful to guard against Trojan horses is such a camouflage, you know?-vulnerability warning-the black bar safety net
Trojan is the use of camouflage methods 1. Modified icon Trojan service to end the use of icons is also a luxurious, Trojans are often deliberately disguised as XT. HTML, etc. you may think that the system is not much harm to the file icon, so it is easy to tempt you opened it. See, the Trojan is...
Preemptive Protection against Blackworm
BlackWorm is a worm that uses its own SMTP engine to spread using remote shares. The worm also tries to disable security-related and file sharing software as well as destroys files of certain types, including .DOC, .ZIP, .XLS and more. Blackworm usually attaches itself to e-mail messages as an...
Sendmail Queue Manipulation & Destruction Vulnerability
The remote Sendmail server, according to its version number, might be vulnerable to a queue destruction vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Talking about after the invasion of the hardware destruction method-vulnerability warning-the black bar safety net
| Internetthe field of security, one foot magic ridge, and then strong fortress also has his deadly colony, hackersarttoday, was born many kinds of means of attack, and in front of the defense method is endless, but whether it is anti-both, all overlooked an important aspect-that is, hardware...
security flaw
The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service kernel oops via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null...
CVE-2005-2099
The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service kernel oops via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null...
holaCMS149.txt
-------------------------------------------------------------------- Virginity Security Advisory 2005-001 - - - -------------------------------------------------------------------- DATE : 2005-03-12 15:45 GMT TYPE : remote VERSIONS AFFECTED : Of course you'll have to edit target and...
Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access
-------------------------------------------------------------------- Virginity Security Advisory 2005-002 - - - -------------------------------------------------------------------- DATE : 2005-03-13 15:11 GMT TYPE : remote VERSIONS AFFECTED : hola-cms-1.4.9-1 http://holacms.drunkencat.net/...
Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access
-------------------------------------------------------------------- Virginity Security Advisory 2005-001 - - - -------------------------------------------------------------------- DATE : 2005-03-12 15:45 GMT TYPE : remote VERSIONS AFFECTED : == hola-cms-1.4.9 http://holacms.drunkencat.net/...
MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities
MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12359/info Multiple input validation vulnerabilities affect MercuryBoard. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in...
SCSA028.txt
================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...
[SCSA-028] Nuked-Klan Multiple Vulnerabilities
================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...
AIX 4.3.35.1 - Invscoutd Symbolic Link
AIX 4.3.35.1 - Invscoutd Symbolic Link source: https://www.securityfocus.com/bid/9982/info Reportedly AIX invscoutd insecurely handles temporary files; this may allow a local attacker to destroy data on vulnerable system. This issue is due to a design error that allows a user to specify a log fil...
bogofilter contrib/bogopass temp file vulnerability
bogofilter-SA-2002:01.bogopass Topic: vulnerability in bogopass Announcement: bogofilter-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-11-29 Category: contrib Type: temporary file created insecurely Impact: anonymous local file destruction or change Credits: - Danger: medium th...
Sendmail < 8.12.1 RestrictQueueRun Option Multiple Argument Local DoS
The remote Sendmail server, according to its version number, might be vulnerable to a queue destruction when a local user runs sendmail -q -h1000 If your system does not allow users to process the queue which is the default, you are not vulnerable. Note that this vulnerability is local only. C...
(WSS-Advisories-02003) PHPBB BBcode Process Vulnerability
WSS-Advisories-02003 PHPBB BBcode Process Vulnerability Release infomation ------------------ Release Date: 2001-4-4 Author: By Whitecell Security SystemsWSS tombkeeper [email protected] alert7 [email protected] Homepage: http://www.whitecell.org/ Impact: -------- WSS has found a...
CVE-1999-1499
The CVE-1999-1499 entry describes a local privilege issue in ISC BIND 4.9 and 8.1. It is triggered by a symlink attack on either named_dump.db (when root kills the process with SIGINT) or named.stats (when SIGIOT is used), allowing local users to destroy files via the symlink mechanism. The linke...