Design/Logic Flaw

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...

CVE-2009-1630

CVE-2009-1630 affects the Linux kernel nfs client: the nfs_permission function in fs/nfs/dir.c (kernel 2.6.29.3 and earlier) does not check execute (MAY_EXEC) permission bits when atomic_open is available. This allows local users to bypass permissions and execute files, as demonstrated by files o...

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

Overview A vulnerability in the Microsoft SQL Server spreplwritetovarbin extended stored procedure could allow an authenticated attacker to execute arbitrary code on an affected server. Description Some versions of Microsoft SQL Server contain a vulnerability in the spreplwritetovarbin stored...

Wonderful with IIS write permissions to trigger the backdoor-vulnerability warning-the black bar safety net

Mentioned Microsoft IIS, many people will think of“vulnerability”: UNICODE, CGI parsing, ida, idq, a Printer and other remote overflow, and the front of last year's webdav remote overflow, etc., really the so-called“porous”in. These are the IIS itself, the application vulnerability, as long as by...

Microsoft IIS - HTTP Request Denial of Service (1)

Microsoft IIS - HTTP Request Denial of Service 1 / Microsoft IIS 5.1 Remote D.o.S Exploit by Kozan Application: Microsoft IIS Internet Information Server Vendor: Microsoft - http://www.microsoft.com/ Discovered by: Inge Henriksen Exploit Coded by: Kozan Credits to ATmaCA, Inge Henriksen Web:...

Microsoft IIS Remote DoS .DLL Url exploit

Microsoft IIS Remote DoS .DLL Url exploit Advisory Name Microsoft IIS Remote Denial of Service DoS .DLL Url exploit Release Date 16. December 2005 Vulnerable Microsoft® Internet Information Server® V5.1 Not vulnerable Microsoft® Internet Information Server® V5.0 Microsoft® Internet Information...

Microsoft IIS Remote Denial of Service (DoS) .DLL Url exploit

Inge Henriksen Security Advisory - Full Disclosure Proof of Concept at http://ingehenriksen.blogspot.com/ Advisory Name: Microsoft IIS Remote Denial of Service DoS .DLL Url exploit Release Date: 16. Desember 2005 Vulnerable: Microsoft® Internet Information Server® V5.1 Not vulnerable: Microsoft®...

CVE-2005-3765

Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code...

CVE-2005-3765

Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code...

Security Update: [CSSA-2001-SCO.32] Open UNIX, UnixWare 7: buffer overflow in ppp utilities

Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: buffer overflow in ppp utilities Advisory number: CSSA-2001-SCO.32 Issue date: 2001 November 12 Cross reference: 1. Problem Description There is a buffer overflow in several of the ppp utilities that are linked to...

Update to Microsoft Security Bulletin MS00-086

-----BEGIN PGP SIGNED MESSAGE----- Hi All - We have updated Microsoft Security Bulletin MS00-086 http://www.microsoft.com/technet/security/bulletin/MS00-086.asp, to provide the following additional information: There is an additional restriction on the vulnerability. As originally reported, the...