CVE-2008-3271

CVE-2008-3271 affects Apache Tomcat 5.5.0 and Tomcat 4.1.0 through 4.1.31. The issue is a synchronization-related defect that allows a remote attacker to bypass IP address restrictions and obtain sensitive information when a request is processed concurrently with another in a different thread, re...

CVE-2008-3271

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...

Apache Tomcat information leak

Race conditions allow to bypass IP address check...

Cisco Router - HTTP Administration Cross-Site Request Forgery Command Execution (1)

Cisco Router - HTTP Administration Cross-Site Request Forgery Command Execution 1 milw0rm.com 2008-09-17...

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)

!/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTP request NO necessary authentication, which will...

Vbulletin Plugin ChatBox Xss Vulnerability

Vbulletin Plugin ChatBox Xss Vulnerability Discovered By AleminKrali [email protected] www.al3m.blogspot.com Greetz : BeyazKurt,Kerem125,Cr@zyKing,Ercu145,Abo Mohammed Net Devil High Risk Vulnerability! Xss Working!note:You login site and xss try. Ex: http://www.localhost/misc.php?do=ccarc&cbt=xss...

Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service

source: https://www.securityfocus.com/bid/30321/info Asterisk is prone to a remote denial-of-service vulnerability because it fails to handle multiple 'POKE' requests in quick succession. Attackers can exploit this issue by sending a persistent stream of 'POKE' requests that will consume processo...

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1605-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

------------------------------------------------------------------------ Debian Security Advisory DSA-1605-1 [email protected] http://www.debian.org/security/ Florian Weimer July 08, 2008 http://www.debian.org/security/faq -...

DSA-1605-1 glibc - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS spoofing and cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. At this time, it is not possible to implement the recommended...

linux/x86 snoop /dev/dsp shellcode 172 bytes

No description provided by source. / Placed the listener here http://www.milw0rm.com/down.php?id=1293 /str0ke / / hey folks, this is snoopshell, short and simply it snoops on /dev/dsp and after attempting to lower the audio quality will stream any data read on this device over a udp stream to a...

Unauthorized reading confirmation from Outlook

I've just got an interesting idea about how a malicious e-mail sender could try to get a unseen by the recipient reading confirmation, including the IP address of the recipient. I was working on S/MIME messages and I thought about the signature validation process, where some of the steps could...

Fedora 8 : net-snmp-5.4.1-7.fc8 (2008-5218)

Tue Jun 10 2008 Jan Safranek 5.4.1-7 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4.1-6 - fixing ipNetToMediaNetAddress to show IP address 432780 - Thu Nov 15 2007 Jan Safranek 5.4.1-5 - added procps to build dependencies 380321 - fix crash on reading xen...

ASUS DPC Proxy 2.0.0.16/19 - Remote Buffer Overflow

/ Dreatica-FXP crew ---------------------------------------- Target : ASUS DPC Proxy 2.0.0.16/2.0.0.24 ---------------------------------------- Exploit : ASUS DPC Proxy 2.0.0.16/2.0.0.19 Remote Buffer Overflow Exploit Exploit date : 02.04.2008 Exploit writer : Heretic2 [email protected] OS :...

verycms2. 0 elevation of privilege vulnerability-vulnerability warning-the black bar safety net

code: passportclient.php function Loginipwrite$winduid global $db,$timestamp,$onlineip; $logininfo="$onlineip|$timestamp|6"; $db-update "UPDATE pwuser SET lastvisit=thisvisit,thisvisit="$timestamp",onlineip="$logininfo" WHERE uid="$winduid""; Look at the$onlineip how to Global.php...

Crack cafe billing system-vulnerability warning-the black bar safety net

For the cafe payment system, to crack we must first understand its principle, the following used more of the“PUBWIN”to explain One, principle: PUBWIN in mind time-consuming, is the IP address for the target, that is it will put the IP and the user is bound, if the user on the machine, the client...

Attacking cisco router-bug warning-the black bar safety net

In you see Before you need to know: －what is IP address?－ What is ISP for?－ What is the TCP/IP data package?－ How to hide your IP address?－ How to use Telnet in?－ How to use HyperTerminal for?－ How to use Ping for?－ How to use TraceRoute it?－ How to use a proxy server?...

CVE-2008-1525

The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40AGD.2 through 3.40AHQ.3, has a Trusted Host value of 0.0.0.0, which allows remote attackers to send SNMP requests from any source IP address...

CVE-2008-1397

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service site-to-site VPN tunnel outage, and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's...

Input validation

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...