CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

FreeBSD 7.0/7.1 vfs.usermount Local Privilege Escalation Exploit

Exploit for freebsd platform in category local exploits ================================================================ FreeBSD 7.0/7.1 vfs.usermount Local Privilege Escalation Exploit ================================================================ / cve-2008-3531.c -- Patroklos Argyroudis, arg...

Sun Solaris Event Port API多个本地拒绝服务漏洞

Bugraq ID: 35437 CNCAN ID：CNCAN-2009062203 Sun Solaris是一款商业性质的操作系统。 Solaris Event Port API存在竞争条件错误，本地攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

FreeBSD IPv6 'SIOCSIFINFO_IN6'权限检查本地安全绕过漏洞

Bugraq ID: 35285 CNCAN ID：CNCAN-2009061102 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD针对"SIOCSIFINFOIN6" IOCTL缺少正确的权限检查，本地攻击者可以利用漏洞修改网络设置导致拒绝服务等攻击。 当修改IPv6网络栈属性时缺少正确的权限检查，发送特殊构建的"SIOCSIFINFOIN6" IOCTLs可导致更改部分IPv6接口设置如MTU或禁用IPv6接口。 FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.1-RELEASE-p6 FreeBSD FreeBSD...

FreeBSD Direct Pipe Write本地信息泄漏漏洞

Bugraq ID: 35279 CNCAN ID：CNCAN-2009061101 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD "direct pipe writes"实现存在一个整数溢出错误，本地攻击者可以利用漏洞获得部分进程的内存信息，导致敏感信息泄漏。 "direct pipe writes"实现存在的缺陷可导致虚拟到物理地址查询被遗漏，可导致未授权读取其他进程的内存分页信息，使得敏感信息泄漏。 FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.2-RELEASE-p1 FreeBSD FreeBSD...

VMware产品Descheduled Time Accounting Driver拒绝服务漏洞

Bugraq ID: 35141 CVE ID：CVE-2009-1805 CNCVE ID：CNCVE-20091805 VMware提供包含多个虚拟主机和服务器的解决方案。 VMware Descheduled Time Accounting driver存在一个未明的安全问题，本地攻击者可以利用漏洞对虚拟机进行拒绝服务攻击。 符合如下条件的虚拟机受此漏洞影响： -虚拟机运行在windows操作系统下。 -VMware Descheduled Time Accounting driver安装在虚拟机上。 -VMware Descheduled Time...

COWON America jetCast 2.0.4.1109 Overflow

?php / COWON America jetCast 2.0.4.1109 .mp3 local heap buffer overlow exploit xp/sp3 by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://www.jetaudio.com/ Tested against JetAudio pack v.7.5.2...

GNOME Evolution '~/.evolution/mail/local'文件权限漏洞

Bugraq ID: 34921 CNCAN ID：CNCAN-2009051302 Evolution是一款个人和工作组信息管理解决方案，可使用在Linux和Unix操作系统下，集成Email、日历、会议安排、联系人管理等功能。 Evolution不安全建立文件权限，本地攻击者可以利用漏洞获得敏感信息。 Evolution默认本地邮件文件夹设置为755，imap mail文件夹为700，但是local,config, vfolder和view为755，可导致泄漏敏感信息 GNOME Evolution 2.24.5 + Ubuntu Ubuntu Linux 8.04 LTS spar...

FreeBSD libc Berkley DB接口未初始化内存本地信息泄漏漏洞

BUGTRAQ ID: 34666 CNCAN ID：CNCAN-2009042302 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD libc Berkeley DB接口写malloc3中获得的未初始化内存到数据库文件，本地攻击者可以利用漏洞获得敏感信息。 FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 7.1 -PRE-RELEASE...

[Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-01 Positive Technologies Security Advisory PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software PGP Desktop 9.9.0...

[Positive Technologies SA 2009-09] Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities

---------------------------------------------------------------------- PT-2009-09 Positive Technologies Security Advisory Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities ---------------------------------------------------------------------- --- Affected...

Ubuntu Update for linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities USN-416-1

Ubuntu Update for Linux kernel vulnerabilities USN-416-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4161.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.12/2.6.15/2.6.17 vulnerabilities USN-416-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

[Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service

---------------------------------------------------------------------- PT-2009-11 Positive Technologies Security Advisory SlySoft Multiple Products ElbyCDIO.sys Denial of Service ---------------------------------------------------------------------- --- Affected Software SlySoft AnyDVD version...

Sun Solaris加密驱动本地拒绝服务漏洞

BUGTRAQ ID: 34000 CVECAN ID: CVE-2009-0838 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的加密伪设备驱动没有正确地释放内存，本地攻击者可以通过vmemhashdelete函数导致系统忙碌。如果出现上述漏洞，系统可能出现类似于以下栈追踪的忙碌： vmemhashdelete: bad free vmemhashdelete vmemxfree objectgetattributevalue fopioctl ioctl Sun Solaris 10.0x86 Sun Solaris 10.0 Sun...

PT-2009-2783 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper handling of invalid pointers by the Windows kernel, allowing local users to gain privileges. This could enable an attacker to run arbitrary...

GLSA-200903-05 : PDFjam: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-05 PDFjam: Multiple vulnerabilities Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created with a predictable...

VUplayer 2.49 .CUE File Local Buffer Overflow Exploit

No description provided by source. / Author: Assed Edin E-mail: [email protected] GreetS : Xcracker & SimO-s0ft & Ga3 Drari Wlad MArrakech ^^ o Manssawch Lycéé Hassan2 & Str0ke / include string.h include stdlib.h include stdio.h include windows.h define OFFSET 1012 char header1=...

CVE-2009-0436

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...

Code injection

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...