ImageMagick ReadDIBImage函数整数溢出漏洞

BUGTRAQ ID: 25765 CVECAN ID: CVE-2007-4988 ImageMagick是一款Unix/Linux平台下开源的图像查看和编辑工具。 ImageMagick在处理带有畸形数据的文件时存在整数漏洞，远程攻击者可能诱使用户处理恶意文件控制用户系统。 ImageMagick的ReadDIBImage函数中存在整数溢出漏洞： 558 image-columns=unsigned long dibinfo.width ... 620 bytesperline=4image-columnsdibinfo.bitsperpixel+31/32; 621...

Cisco Clean Access多个远程安全漏洞

Cisco Clean Access CCA是一种用于自动检测、隔离、清除受恶意代码感染的设备访问网络的软件解决方案。 CCA的实现上存在两个安全漏洞，远程攻击得可能利用这些漏洞获取非授权访问或得到敏感信息。 CCA与Cisco Clean Access Manager CAM交互时，交互双方需要相同的密钥，CAM端的密钥在CAM和CAS初始化时设定，CCA实现上的漏洞使此密钥不可被更改，网络上所有相关的设备共享了相同的密钥，可能导致非授权访问。此漏洞的Cisco Bug ID为CSCsd48626，影响如下的CCA版本： CCA releases 3.6.x - 3.6.4.2 CCA...

XXS in SCT email client

Vendor : SCT URL : http://www.SCT.com/ Version: Campus Pipeline Risk : Cross site scripting Description: Fusetalk SCT Campus Pipeline is the Web platform of choice at over 175 institutions. It improves efficiency, builds community, and provides freedom of choice by integrating disparate systems a...

Debian DSA-111-1 : ucd-snmp - remote exploit

The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploits. New UCD-SNMP packages have been prepared to fix these problems as well as a few others. The...

FreeBSD : SA-04:03.jail

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to attach to another jail. An attacker compromised a jailed process on the remote host could exploit this flaw to switch to other jails on the system. C Tenable Network Security, Inc. ...

Re: Internet Explorer and Opera local zone restriction bypass

There was not a lot of details in your post, so I will try to verify and clarify your findings. First things first, this is not a problem with Microsofts Internet Explorer, but with Macromedia and their Flash player. I could reproduce this issue successfully with a fresh install of the latest Fla...

Important: Red Hat Security Advisory: : : : updated ghostscript packages fix vulnerabilities

Updated packages are available for GNU Ghostscript under the iSeries and pSeries architectures which fix various security vulnerabilities. Ghostscript is a program for displaying PostScript files or printing them to non-PostScript printers. An untrusted PostScript file can cause ghostscript to...

Macromedia JRUN Buffer overflow vulnerability (#NISR29052002)

NGSSoftware Insight Security Research Advisory Name: Macromedia JRun 3.1 Systems Affected: IIS 4/5 on WinNT 4/Win2K Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.macromedia.com Author: David Litchfield [email protected] Advisory URL:...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...

wu-ftp.2.4.2.bin.ftponly.patch

Date: Sat, 27 Mar 1999 13:21:46 +0100 From: "Bluefish @ home" To: [email protected] Subject: wu-ftp 2.4.2 release VR16 /bin/ftponly as I previously reported to euro-coders, since I installed the wu-ftpd versions which fixes the beta-18 hole, the good old ftponly hack described at all pages...