About the security content of Safari 5.0.3 and Safari 4.1.3

About the security content of Safari 5.0.3 and Safari 4.1.3 Last Modified: November 18, 2010 Article: HT4455 Email this article Print this page Summary This document describes the security content of Safari 5.0.3 and Safari 4.1.3. For the protection of our customers, Apple does not disclose,...

Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038

Matta Consulting - Matta Advisory http://www.trustmatta.com Cisco Unified Videoconferencing multiple vulnerabilities Advisory ID: MATTA-2010-001 CVE reference: CVE-2010-3037 CVE-2010-3038 Affected platforms: Cisco Unified Videoconferencing 3515,3522,3527,5230,3545, 5110,5115 Systems and unspecifi...

CVE-2010-3039

/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...

CVE-2010-3040

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager ICM before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a 1 HandleUpgradeAll, 2 AgentUpgrade, 3 HandleQueryNodeInfoReq, or 4 HandleUpgradeTrace TCP packet, aka...

Design/Logic Flaw

/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...

CVE-2010-3039

CVE-2010-3039 affects Cisco Unified Communications Manager (CUCM) 6–8. A setuid binary (/usr/local/cm/bin/pktCap_protectData) fails to validate command-line arguments, allowing a local, authenticated administrator to inject shell metacharacters and execute arbitrary commands. The vulnerability en...

Trojan Exploiting Adobe Flash Bug Has Some Odd Traits

The piece of malware that’s being used to exploit the unpatched Adobe Flash bug that was disclosed Thursday looks like sort of a run-of-the-mill Trojan, but an analysis shows that it does have some unique features. The Trojan is known by a couple of names, including Sykipot, and its infection...

NetBSD Larn 'Games'组本地特权提升漏洞

Bugtraq ID: 44293 NetBSD是一款基于BSD的操作系统。 当game从setuid更改为setgid时larn没有进行更新-把用户IDs替代为组IDs，这意味着当试图下降到低特权级别时，没有任何事情发生。因此game一直以game组权限运行，并可以games组权限进行各种如写或保存文件操作。 保存文件可写入/var/games可覆盖或破坏属于其他游戏的文件。 NetBSD 4.0 厂商解决方案 已经修补的源文件可从NetBSD CVS库中获得： CVS branch file revision ------------- ----------------...

CVE-2010-4069

CVE-2010-4069 affects IBM Informix Dynamic Server (IDS) with a stack-based buffer overflow in the DBINFO handling inside SQL statements. Affects IDS 7.x–7.31, 9.x–9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3. An attacker with remote authenticated access could ...

CVE-2010-4070

The CVE-2010-4070 issue is an Integer overflow in librpc.dll (portmap.exe) used by the ISM Portmapper service in IBM Informix Dynamic Server (IDS). The overflow occurs via a crafted parameter size and can lead to remote code execution or a denial of service (heap memory corruption). Affected IDS ...

Stack overflow

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server IDS 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7186)

PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way. CVE-2010-3433 PostgreSQL was updated to version 8.1.22 which fixes the security issue...

[STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA multiple vulnerabilities

STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...

ITS SCADA SQL Injection

STANKOINFORMZASCHITA-10-02 ITS SCADA – Authorization bypass Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: ITS SCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of exploit: Yes Product...

Netbiter webSCADA Disclosure

STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...

Lyris ListManager - MSDE Weak sa Password (Metasploit)

$Id: lyrislistmanagerweakpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Samba: Stack-based buffer overflow by processing specially-crafted SID records

Stack-based buffer overflow in the 1 sidparse and 2 domsidparse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Windows Security ID SID on a file share...

Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks

Multiple Cisco products are vulnerable to DNS cache poisoning attacks due to their use of insufficiently randomized DNS transaction IDs and UDP source ports in the DNS queries that they produce, which may allow an attacker to more easily forge DNS answers that can poison DNS caches. To exploit th...

DevonIT weak authentication and buffer overflow in /usr/bin/tm-console-bin

Overview The DevonIT management tool for thin clients uses a shared secret that is transmitted over the network in the clear. The /usr/bin/tm-console-bin application contains a buffer overflow, which may allow an attacker to execute arbitrary code. Description The management tool transmits an...

About the security content of iTunes 9.1

About the security content of iTunes 9.1 Last Modified: August 12, 2010 Article: HT4105 Email this article Print this page Summary This document describes the security content of iTunes 9.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a...