507 matches found
CVE-2010-0393
The cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with...
MySQL yaSSL CertDecoder::GetName Buffer Overflow
This module exploits a stack buffer overflow in the yaSSL 1.9.8 and earlier implementation bundled with MySQL. By sending a specially crafted client certificate, an attacker can execute arbitrary code. This vulnerability is present within the CertDecoder::GetName function inside...
Fortify 360 Web Interface Detection
The remote web server is running the web interface for Fortify 360, a web interface to analyze the results of source code audits. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc...
Can we learn from Microsoft and Google on security?
Tech security company Fortify and security consulting firm Cigital are getting ready to release a set of best practices that tech companies and other businesses can follow to ensure that the software they develop is secure. The authors developed the model by studying the security practices at...
And then the explosion a few micro-points have not fortified from the start or passive start-vulnerability warning-the black bar safety net
From a friend: large ravioli 1. cmd to run before the execution of the programsysnap inform --passive start HKEYCURRENTUSER\Software\Microsoft\Command Processor AutoRun REGSZ "xxx.exe" 2. session manager-from the start HKEYLOCALMACHINE\SYSTEM\ControlSet001\Control\Session Manager...
SUSE-SA:2007:005: w3m
The remote host is missing the patch for the advisory SUSE-SA:2007:005 w3m. A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. In SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise Server and Desktop 10 this problem was not...