Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Updated conga packages that correct a security flaw and provide bug fixes and add enhancements are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Conga package is a web-based administration tool for remote cluster and storag...

SMBRELAY ultimate application, without password into the viewer hard-vulnerability warning-the black bar safety net

SMBRELAY ultimate application, without password into the viewer's hard disk First thank ENVYMASK Big Brother tireless guidance. Oh Description:: This attack only needs 2 machine, 3 IP address On the Protocol and IP issues description: My IP is 2 1 8. 1 9 7. 2 4 8. 2 1 2, but SMBRELAY is not runni...

Fedora 7 : bochs-2.3-7.fc7 (2007-1778)

This security update of bochs fixes CVE-2007-2894 : The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error. Note that Tenable Network Security...

Code injection

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...

CVE-2007-5829

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...

CVE-2007-5829

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...

SMBRELAY ultimate application, without password into the viewer hard-vulnerability warning-the black bar safety net

SMBRELAY ultimate application, without password into the viewer's hard disk First thank ENVYMASK Big Brother tireless guidance. Oh Description:: This attack only needs 2 machine, 3 IP address On the Protocol and IP issues description: My IP is 2 1 8. 1 9 7. 2 4 8. 2 1 2, but SMBRELAY is not runni...

CVE-2003-1462

CVE-2003-1462 affects mod_survey 3.0.0 through 3.0.15-pre6. The issue arises because it does not validate whether a survey exists before creating a subdirectory, which can be exploited remotely to cause disk consumption and potentially crash the service (DoS). Exploitation details are not provide...

Code injection

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

[ELEYTT] 10PAZDZIERNIK2007

Eleytt Research www.eleytt.com Overview: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Tomasz Polis, www.eleytt.com Credit: ==================== Michal Bucko, Eleytt, www.eleytt.com/michal.bucko Vulnerability Table =================== 1. CA Erwin Datatype Standards File...

AK922: break the disk to a lower detection implementation file is hidden-a vulnerability warning-the black bar safety net

AK922: break the disk to a lower detection implementation file hidden Author: Azy email: [email protected] Completed on: 2007-08-08 Currently, some of the published mainstream anti-rootkit detects hidden files, there are two main methods: the first one is a file system layer of detection, which...

The history of the most simple Windows System Password rescue-vulnerability warning-the black bar safety net

Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...

CVE-2007-4618

CVE-2007-4618 affects BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7. The issue is an unspecified vulnerability that allows remote attackers to cause a denial of service via certain malformed HTTP headers, leading to disk consumption. The provided documents do not include expli...

[SECURITY] Fedora Core 6 Update: sysstat-7.0.0-5.fc6

This package provides the sar and iostat commands for Linux. Sar and iostat enable system monitoring of disk, network, and other IO activity...

VMWare poor guest isolation design

I have run across a design issue in VMware's scripting automation API that diminishes VM guest/host isolation in such a manner to facilitate privilege escalation, spreading of malware, and compromise of guest operating systems. VMware's scripting API allows a malicious script on the host machine ...

CVE-2007-4495

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

CVE-2007-4495 concerns the Solaris 10 ata disk driver on x86, with the impact described as a local denial of service via an unspecified ioctl function (Bug 6433124). Connected documents indicate mitigations in Solaris ATA/DT driver updates, e.g., Solaris Update for ata Driver 117122-03 and relate...

CVE-2007-4495

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

Code injection

Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service system panic via unspecified ioctl functions, aka Bug 6433123...

CVE-2007-4492

Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service system panic via unspecified ioctl functions, aka Bug 6433123...