CVE-2009-3492: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to 1 Calendar.php, 2 Comment.php, 3 Rss.php and 4 Trackback.php in lib/Loggix/Module/; and 5...

SILC Client Channel Name Format String Vulnerability

SILC Client is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SILC Client Channel Name Format String Vulnerability

This host has SILC Client installed and is prone to Format String vulnerability. OpenVAS Vulnerability Test $Id: secpodsilcprdtschannelnameformatstringvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SILC Client & Toolkit Channel Name Format String Vulnerability Authors: Nikita MR Copyright: Copyrigh...

FSphp 0.2.1 Remote File Inclusion

o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ o Vulnerable file includeonce $FSPHPLIB . "/path.php" ; lib/FSphp.php...

FSphp 0.2.1 Remote File Inclusion

Exploit for unknown platform in category web applications ================================= FSphp 0.2.1 Remote File Inclusion ================================= o FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download...

SuSE9 Security Update : permissions (YOU Patch Number 10815)

It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...

SuSE9 Security Update : permissions and filesystem (YOU Patch Number 10539)

It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...

CVE-2009-3307: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the FSPHPLIB parameter to 1 FSphp.php, 2 navigation.php, and 3 pathwrite.php in lib/...

CVE-2009-3287: Improper Input Validation

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

Stack overflow

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

The CVE-2009-3221 entry concerns a stack-based buffer overflow in Audio Lib Player (ALP) . The vulnerability is triggered by a long URL inside a .m3u playlist file , allowing a remote attacker to execute arbitrary code on affected systems. The root cause is a stack-based overflow in ALP when proc...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

Audio Lib Player (m3u File) Buffer Overflow Exploit (SEH)

No description provided by source. Audio Lib Player m3u SEH overwrite product: http://www.toocharger.com/telecharger/logiciels/audio-lib-player/19056.htm Usage: Create playlist, load exploit.m3u and connect to shell on port 4444 $ nc 192.168.1.131 4444 Microsoft Windows XP Version 5.1.2600 C...

Audio Lib Player Buffer Overflow

Audio Lib Player m3u SEH overwrite product: http://www.toocharger.com/telecharger/logiciels/audio-lib-player/19056.htm Usage: Create playlist, load exploit.m3u and connect to shell on port 4444 $ nc 192.168.1.131 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp...

CVE-2009-3163: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...

Audio Lib Player - .m3u Local Buffer Overflow (SEH)

Audio Lib Player - .m3u Local Buffer Overflow SEH Audio Lib Player m3u SEH overwrite product: http://www.toocharger.com/telecharger/logiciels/audio-lib-player/19056.htm Usage: Create playlist, load exploit.m3u and connect to shell on port 4444 $ nc 192.168.1.131 4444 Microsoft Windows XP Version...

Audio Lib Player (m3u File) Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ========================================================= Audio Lib Player m3u File Buffer Overflow Exploit SEH ========================================================= Audio Lib Player m3u SEH overwrite product:...

SuSE Security Summary SUSE-SR:2009:014

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...