xoops Quizz Module IMG bug

Author: Magistrat http://www.blocus-zone.com magistrat@blocus-zone com Date: 11/11/2002 Object: IMG bug in quizz module risk: Medium-high advisory url: http://www.blocus-zone.com/modules/news/article.php?storyid=180 ----------------------------------------------------- After having highlighted wi...

PHP 3.0.x4.x - Move_Uploaded_File open_basedir Circumvention

PHP 3.0.x4.x - MoveUploadedFile openbasedir Circumvention source: https://www.securityfocus.com/bid/4325/info PHP is a server side scripting language, designed to be embedded within HTML files. It is available for Windows, Linux, and many Unix based operating systems. It is commonly used for web...

CVE-2001-1131

Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... modified dot dot in the CD command...

Ipswitch WS_FTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow

Ipswitch WSFTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow source: https://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP...

CVE-1999-1280

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...

CVE-2001-1131

Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... modified dot dot in the CD command...

CHINANSL Security Advisory(CSA-200106)

Topic: JavaServer Web Dev KitJSWDK1.0.1 for win2000 Directory traversal Vulnerability vulnerable: Microsoft Win2000 ЎЎЎЎ+JSWDK1.0.1 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have JSWDK 1.0.1 installed.The vulnerabili...

Vulnerability in SlimServe FTPd

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in SlimServe FTPd Overview SlimServe FTPd v1.0 is an ftp server available from http://www.whitsoftdev.com and http://www.download.com. A vulnerability exists which allows an attacker to break out of the ftp root using...

CVE-2000-1099

CVE-2000-1099 affects the Java Runtime Environment in JDK 1.2.2_05 and earlier . The vulnerability allows an untrusted Java class to call into a disallowed class, potentially allowing sandbox escape and unauthorized activities. The available documents do not provide a specific patch version or re...

CVE-2000-1099

Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...

Linux news 9.12.00

Новое 2.2.18pre25 Похоже исправлен последний баг что означает возможно скорый выход 2.2.18release. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-12-07-012-04-NW-KN Linux Kernel pre-patch 2.4.0 test12-pre7 Седьмой пререлиз двенадцатого тестового ядра Linux - Linux Kernel pre-patch 2.4....

Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей Linux

No description provided...

Очередной обзор новостей linux

No description provided...

WDK_v1.0.vuln.txt

../ bugs in the Java Web server Development kit built in servlet engine http://localhost:8080/../../../../etc/passwd below is my version info. JavaServertm WDK v1.0 EA elguapo@localhost elguapo$ telnet localhost 8080 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^'...

User-Mode Linux (Linux Kernel 2.4.17-8) - Memory Access Privilege Escalation

User-Mode Linux Linux Kernel 2.4.17-8 - Memory Access Privilege Escalation source: https://www.securityfocus.com/bid/3973/info User-Mode Linux UML is a patch which allows the Linux Kernel to run as a user space process. It is currently available for the Linux operating system. It may be used as a...

Linux news 25.08.00

Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...

Linux news 11.08.00

FOR ALL Ну вот ... вот и кончился отпуск ! : И начались суровы будни. Все как и раньше: рассылка переходит из спящего режима в обычный, регулярный ритм ... ну или подобие тому : В общем всем жаркого лета, теплого пЫва и ... Ядро 2.2.17pre16 В очередной бета версии следующего стабильного ядра ветк...

sperl 5.00503 (and newer ;) exploit

Not much to say except I feel little bit stupid posting it ... This exploit gives instant root, at least on RedHat 6.x/7.0 Linux boxes I have available for tests... And for sure, all other systems are vulnerable as well - it's just maybe this code will need some refining / tuning / minor changes...

Linux news 3.07.00

WU-FTPD 2.6.1 Вышла новая версия популярного FTP сервера WU-FTPD - WU-FTPD 2.6.1. В данной версии появилась поддержка virtual passwd/virtual shadow как в BeroFTPD. Кроме того пофиксен серьезный security баг, благодаря которому пользователь мог получить права root-а. Также пофиксен баг с возможной...