USN-124-1: Mozilla and Firefox vulnerabilities

When a popup is blocked the user is given the ability to open that popup through the popup-blocking status bar icon and, in Firefox, through the information bar. Doron Rosenberg noticed that popups which are permitted by the user were executed with elevated privileges, which could be abused to...

FreeBSD-SA-05:07.ldt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:07.ldt Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure in i386getldt Category: core Module: sysi386 Announced: 2005-05-06 Credits:...

evolution security update

CentOS Errata and Security Advisory CESA-2005:397 Updated evolution packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is a GNOME-based collection of personal information...

RHEL 2.1 : kernel (RHSA-2005:283)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 2.1. This is the seventh regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handl...

HP OpenView Radia Management Portal 1.0/2.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/13414/info A remote command execution vulnerability affects HP OpenView Radia Management Portal. This issue is due to a failure of the application to properly secure access to critical functionality. This is due to a directory traversal issue that will...

Important: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Vladimir V. Perepelitsa discovered a bug in the way Firefox handles...

Mozilla may execute JavaScript with elevated privileges when defined in site icon tag

Overview Mozilla may execute JavaScript contained within a site icon tag with elevated privileges. This may allow an attacker to execute arbitrary commands on a vulnerable system. Description XPCOMXPCOM is a cross-platform component object model similar to Microsoft COM or CORBA. XPCOM provides t...

FreeBSD-SA-05:02.sendfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: syskern Announced: 2005-04-04 Credits: Sven...

CVE-2003-1121

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to 1 modify arbitrary registry entries via the ScriptLogic RPC service SLRPC or 2 modify arbitrary configuration via the RunAdmin services...

Debian DSA-691-1 : abuse - several vulnerabilities

Several vulnerabilities have been discovered in abuse, the SDL port of the Abuse action game. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0098 Erik Sjolund discovered several buffer overflows in the command line handling, which could lead to the...

DSA-691-1 abuse - several

Bulletin has no description...

phpBB < 2.0.14 Cookie Authentication Bypass and SQL Injection Vulnerabilities

Binary data 2674.prm...

cmd5checkpw CRAM-MD5 mail authentication program privilege escalation

Elevated privileges are not dropped then user-supplied program is launched...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. This advisory...

HP-UX PHSS_27411 : HP-UX Running ISEE Software, Local Elevated Privileges (HPSBUX00201 SSRT071373 rev.3)

s700800 11.X ISEE user interface functionality correction : HP Instant Support Enterprise Edition ISEE has the potential of allowing authenticated users access to restricted files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...

GLSA-200502-23 : KStars: Buffer overflow in fliccd

The remote host is affected by the vulnerability described in GLSA-200502-23 KStars: Buffer overflow in fliccd Erik Sjolund discovered a buffer overflow in fliccd which is part of the INDI support in KStars. Impact : An attacker could exploit this vulnerability to execute code with elevated...

KStars: Buffer overflow in fliccd

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KStars is a desktop planetarium for KDE. It includes support for the Instrument Neutral Distributed Interface INDI. Description Erik Sjolund discovered a buffer overflow in fliccd which is pa...

synaesthesia sound visualisation symbolic links problem

Symbolic links problem due to access to user's file with elevated privileges...

DSA-681-1 synaesthesia - privilege escalation

Bulletin has no description...

GLSA-200501-44 : ncpfs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-44 ncpfs: Multiple vulnerabilities Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable buffer overflow in ncplogin CAN-2005-0014, and due to a flaw in nwclient....