HackInTheBox Quartal Magazine - eZine Issue 09

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 09 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/HITB-Ezine-Issue-009.pdf Release Date: ============= 2012-11-30 Vulnerability...

CVE-2012-6036

The 1 memcsavegetnextpage, 2 tmemcrestoreputpage and 3 tmemcrestoreflushpage functions in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service memory corruption and host crash or possibly execute...

CVE-2011-5244

Multiple off-by-one errors in the 1 token and 2 linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a DVI file containi...

Fedora Update for mcrypt FEDORA-2012-17290

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for mcrypt FEDORA-2012-17318

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17318 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

cups-pk-helper privilege escalation

Insecure CUPS functions call...

HP/H3C and Huawei networking equipment h3c-user snmp vulnerability

Overview HP/H3C and Huawei networking equipment contains a vulnerability which could allow an attacker to access administrative functions of the device using systems network management protocol SNMP requests. Description According to the researcher's report.:"HP/H3C and Huawei networking equipmen...

Firefox < 16.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 16.0 and thus, is affected by the following vulnerabilities : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-3983 - '' elements can be abused to...

SeaMonkey < 2.13 Multiple Vulnerabilities

The installed version of SeaMonkey is affected by the following vulnerabilities : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-3983 - '' elements can be abused to cover arbitrary portions of a...

Mozilla Firefox Multiple Vulnerabilities - 01 - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

soapbox Local Root / Privilege Escalation Vulnerability

----------------------------------- soapbox 0.3.1 = Local Root Exploit ----------------------------------- Vendor URI: http://dag.wieers.com/home-made/soapbox/ Credit: Jean Pascal Pereira [email protected] Description: "Soapbox allows to restrict processes to write only to those places you want...

Mozilla: Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties (MFSA 2012-83)

The Chrome Object Wrapper COW implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to...

Chrome Object Wrapper (COW) does not disallow access to privileged functions or properties — Mozilla

Security researcher Mariusz Mlynski reported that when InstallTrigger fails, it throws an error wrapped in a Chrome Object Wrapper COW that fails to specify exposed properties. These can then be added to the resulting object by an attacker, allowing access to chrome privileged functions through...

CVE-2012-5304: Improper Control of Generation of Code

Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code into functions/dbconnect.php via unspecified vectors. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the...

PT-2012-5903

Name of the Vulnerable Software and Affected Versions YVS Image Gallery affected versions not specified Description A static code injection issue exists, allowing remote attackers to inject arbitrary PHP code into functions/db connect.php via unspecified vectors. This issue is only present when t...

Authentication Implications in Uniquely Identifiable Graphics Cards

Researchers working on the “physically unclonable functions found in standard PC components PUFFIN project” announced last week that widely used graphics processors could be the next step in online authentication. PUFFIN is a joint project between Technische Universiteit Eindhoven in the...

soapbox 0.3.1 - Local Privilege Escalation

soapbox 0.3.1 - Local Privilege Escalation ----------------------------------- soapbox 0.3.1 Description: "Soapbox allows to restrict processes to write only to those places you want. Read-access however is still based on file-permissions. By preloading the Soapbox library, you can run programs a...

[SECURITY] Fedora 18 Update: libguac-0.6.3-1.fc18

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

Fedora Update for mcrypt FEDORA-2012-13656

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-13656 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2012-4402

webservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly restrict the use of web-service tokens, which allows remote authenticated users to run arbitrary external-service functions via a token intended for only one service...