tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

Code injection

iscdeploy in IBM WebSphere Application Server WAS 6.1 before 6.1.0.43, 7.0 before 7.0.0.21, and 8.0 before 8.0.0.2 on the IBM i platform sets weak permissions under systemapps/isclite.ear/ and bin/clientffdc/, which allows local users to read or modify files via standard filesystem operations...

CVE-2011-1376

CVE-2011-1376 affects IBM WebSphere Application Server on IBM i. The issue arises from iscdeploy creating insecure permissions in systemapps/isclite.ear/ and bin/client_ffdc/, allowing a local user to read or modify files via normal filesystem operations. Affected versions are WAS 6.1 prior to 6....

TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow

!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...

An error message "Collecting thread has failed to initialize (Time difference between Veeam Monitor server and ESX host is too large. Make sure that NTP is enabled on ESX host and try again.) and will be stopped" in Veeam Monitor

Challenge The error "Connection problems" appears with vCenter server or ESXi host in Veeam ONE Monitor client infrastructure view. vCenter server or the ESXi host becomes grayed out: No data goes to the Veeam ONE Monitor client and into the Veeam ONE database. vCenter server or ESXi might be...

Fedora 15 : kernel-2.6.41.4-1.fc15 (2011-16621)

Update from kernel 3.1.1 to 3.1.4 : - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3. 1.4 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog- 3.1.3 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog- 3.1.2 Additional changes : - Fix virtualbox: use a different method to fake...

[SECURITY] Fedora 14 Update: squid-3.1.16-1.fc14

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

CVE-2011-4155

CVE-2011-4155 is an XSS vulnerability reported for HP Network Node Manager i (NNMi) in 9.0x and 9.1x, enabling remote injection of arbitrary web script/HTML via unspecified vectors. Connected documents also describe related entries (CVE-2011-5184) with multiple XSS vectors in NNMi 9.10 (specific ...

[SECURITY] Fedora 15 Update: phpPgAdmin-5.0.3-1.fc15

phpPgAdmin is a fully functional web-based administration utility for a PostgreSQL database server. It handles all the basic functionality as well as some advanced features such as triggers, views and functions stored procedures. It also has Slony-I support...

CentOS Update for sysstat CESA-2011:1005 centos5 i386

Check for the Version of sysstat OpenVAS Vulnerability Test CentOS Update for sysstat CESA-2011:1005 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

i-Gallery 3.4 - d Cross-Site Scripting

i-Gallery 3.4 - d Cross-Site Scripting source: https://www.securityfocus.com/bid/49712/info i-Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser o...

i-Gallery 3.4 Cross Site Scripting

=========================================================== i-Gallery 3.4 asp Cross-site scripting Vulnerability ----------------------------------------------------------- foun by :kurd-team group : kurdish hackers team contact : [email protected] site : kurdteam.org...

i-Gallery 4.1 Source Code Disclosure

=========================================================== i-Gallery 4.1 asp Remote Source Code Disclosure Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : [email protected] site : kurdteam.org...

i-Gallery 3.4 Source Code Disclosure

=========================================================== i-Gallery 3.4 asp Remote Source Code Disclosure Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : [email protected] site : kurdteam.org...

i-Gallery 3.4 - 'd' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49712/info i-Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

[security bulletin] HPSBMU02703 SSRT100242 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03005726 Version: 1 HPSBMU02703 SSRT100242 rev.1 - HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service DoS, Unauthorized Disclosure of Information,...

Fedora Update for squid FEDORA-2011-11817

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2011-11817 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 15 Update: squid-3.1.15-1.fc15

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities Product: Enterprise Messenger Server Vulnerable version: 2.0 Other versions could also be affected Fixed version: N/A Impact: Medium Homepage: http://netsaro.com/Downloads.aspx...

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities

NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities =================================================== Secur-I Research Group Security Advisory SV-2011-004 =================================================== Title: NetSaro Enterprise Messenger v2.0 Multiple Vulnerabilities Product:...