537 matches found
SLES9: Security update for Acrobat Reader
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: acroread More details may also be found by searching for keyword 5019054 within the SuSE Enterprise Server 9 patch database at...
Sun Java JRE Multiple Vulnerabilities (Linux)
This host is installed with Sun Java JRE and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavajredosvulnlin.nasl 7699 2017-11-08 12:10:34Z santu $ Sun Java JRE Multiple Vulnerabilities Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Privacy problems in the cloud
With the economy cratering, staffs and budgets being cut and resources scarce, cloud computing has quickly become the prettiest girl at the prom. IT managers love its convenience and power and accounting departments are quite fond of its cost efficiencies. But what of security and privacy? Where ...
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow PoC Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS,...
Debian Security Advisory DSA 975-1 (nfs-user-server)
The remote host is missing an update to nfs-user-server announced via advisory DSA 975-1. Marcus Meissner discovered that attackers can trigger a buffer overflow in the path handling code by creating or abusing existing symlinks, which may lead to the execution of arbitrary code. This vulnerabili...
Fedora Core 3 : cups-1.1.22-0.rc1.8.6 (2005-733)
These updated packages fix a problem handling PDF files that could have security implications CVE-2005-2097. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
News Server (NNTP) Anonymous Read / Write Access
The remote server seems open to remote users. Some people prefer open public NNTP servers to be able to read or post articles anonymously. Unwanted connections could waste your bandwidth or put you into legal trouble if a malicious person were to use your server to post abusive articles. Keep in...
GLSA-200408-16 : glibc: Information leak with LD_DEBUG
The remote host is affected by the vulnerability described in GLSA-200408-16 glibc: Information leak with LDDEBUG Silvio Cesare discovered a potential information leak in glibc. It allows LDDEBUG on SUID binaries where it should not be allowed. This has various security implications, which may be...
glibc: Information leak with LD_DEBUG
Background The GNU C library defines various Unix-like "system calls" and other basic facilities needed for a standard POSIX-like application to operate. Description Silvio Cesare discovered a potential information leak in glibc. It allows LDDEBUG on SUID binaries where it should not be allowed...
RHEL 2.1 : glibc (RHSA-2003:249)
Updated glibc packages that fix a number of bugs as well as a buffer overflow issue are now available. The GNU libc package known as glibc contains the standard C libraries used by applications. A bug in the getgrouplist function can cause a buffer overflow if the size of the group list is too...
mksnap_ffs clears file system options
The kernel interface for creating a snapshot of a filesystem is the same as that for changing the flags on that filesystem. Due to an oversight, the mksnapffs8 command called that interface with only the snapshot flag set, causing all other flags to be reset to the default value. A regularly...
Using Java from Javascript
Opera and Netscape browsers allow you to include java methods calls in your javascript . As Javascript has support for objects you can use objects returned by these calls in your scripts . I have been looking for information about the possibly security implications and vulnerabilities published...
Microsoft Internet Explorer 5 - IFrame/Frame Cross-Site/Zone Script Execution
source: https://www.securityfocus.com/bid/5672/info When a Microsoft Internet Explorer MSIE window opens another window, security checks should prevent the parent from accessing the child if the latter is of another domain or Security Zone. It has been reported that such checks fails to occur...
Exploiting the Google toolbar (GM#001-MC)
GreyMagic Security Advisory GM001-MC ===================================== By GreyMagic Software, Israel. 08 Aug 2002. Available in HTML format at http://security.greymagic.com/adv/gm001-mc/. Topic: Exploiting the Google toolbar. Discovery date: 31 Jul 2002. Affected applications:...
rsync <= 2.5.1 Remote Exploit (2)
Exploit for linux platform in category remote exploits ================================= rsync include include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 defi...
rsync 2.5.1 - Remote (2)
rsync 2.5.1 - Remote 2 / 7350rsync - rsync include include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777 defi...
rsync 2.5.1 - Remote (1)
rsync 2.5.1 - Remote 1 / 7350fuqnut - rsync include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777 define...
rsync <= 2.5.1 Remote Exploit
Exploit for linux platform in category remote exploits ============================= rsync include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define...