openSUSE 10 Security Update : epiphany (epiphany-5102)

The Mozilla XULRunner 1.8.1 engine was updated to security update version 1.8.1.12. This includes fixes for the following security issues : - MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect - MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain text files - MFSA...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5002)

This update brings Mozilla Firefox to security update version 2.0.0.12 Following security problems were fixed : - MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div overlay - MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect - MFSA 2008-09/CVE-2008-0592 Mishandling of...

Mishandling of locally-saved plain text files — Mozilla

Mozilla contributor oo.rio.oo demonstrated that once a file with Content-Disposition: attachment and improper Content-Type: plain/text is saved locally, the browser would no longer open local files with .txt extensions for viewing, but would rather prompt the user to save the file...

Novell ZENworks ESM Security Client STEngine Privilege Escalation

Novell ZENworks Endpoint Security Management ESM Security Client is installed on the remote host. It provides a centrally-managed, policy-based firewall for enterprise computers. The version of this software on the remote host dynamically generates various scripts which are then executed by the...

HP-UX PHNE_35351 : s700_800 11.11 cumulative ARPA Transport patch

s700800 11.11 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP IPv4. This vulnerability could be remotely exploited to cause a Denial of Service DoS. HPSBUX01137...

File type confusion due to %00 in name — Mozilla

Ronald van den Heetkamp reported that a filename URL containing %00 encoded null can cause Firefox to interpret the file extension differently than the underlying Windows operating system potentially leading to unsafe actions such as running a program. This is only accessible locally...

[Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability

Linux Kernel DCCP Memory Disclosure Vulnerability Synopsis: The Linux kernel is susceptible to a locally exploitable flaw which may allow local users to steal data from the kernel memory. Vulnerable Systems: Linux Kernel Versions: = 2.6.20 with DCCP support enabled. Kernel versions 2.6.20 lack...

Can not log on locally to the system of the Telnet solution-vulnerability warning-the black bar safety net

In Windows 2 0 0 0 environment, is Group Policy to deny logon locally has been relatively headache thing. This article will introduce one to all users denied to log on locally after the solve method. In Windows2000, if a user is to cancel the log on locally permission, when the user locally logs ...

Cray UNICOS /usr/bin/script - Command Line Argument Local Overflow

source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges. Successful exploitation could...

CVE-2002-1769

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAPAnonymous, with a default password of LdapPassword1, which allows remote attackers the "Log on locally" privilege...

CVE-2002-1769: Undefined Security Weakness

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAPAnonymous, with a default password of LdapPassword1, which allows remote attackers the "Log on locally" privilege...

Microsoft Windows Kernel Object Management Denial Of Service Vulnerability

Description The Microsoft Windows kernel is prone to a locally exploitable denial-of- service vulnerability. The issue is related to object management in the Windows kernel. Technologies Affected Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows...

DilAurDimag-Advisory-07-20-12-2004.txt

------------------------------------------------------------------------------------ DilAurDimag - Advisory 07 - 20/12/04 ------------------------------------------------------------------------------------ Program: ChangePassword, a YP/Samba/Squid password-changing tool Homepage:...

[CORE-2003-12-05] DCE RPC Vulnerabilities New Attack Vectors Analysis

Core Security Technologies Advisory http://www.coresecurity.com DCE RPC Vulnerabilities New Attack Vectors Analysis Date Published: 2003-12-10 Last Update: 2003-12-10 Advisory ID: CORE-2003-12-05 Title: DCE RPC Vulnerabilities New Attack Vectors Analysis Remotely Exploitable: Yes Locally...

CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall

Core Security Technologies Advisory http://www.coresecurity.com Vulnerabilities in Kerio Personal Firewall Date Published: 2003-04-28 Last Update: 2003-04-28 Advisory ID: CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Name: None currently assigned Title: Kerio Personal Firewall Replay Attack and...

XMame 0.6x - Lang Local Buffer Overflow

// source: https://www.securityfocus.com/bid/7773/info Xmame is prone to a locally exploitable buffer overflow. This is due to insufficient bounds checking of the command line parameter used to specify language settings --lang. Successful exploitation on some systems could result in execution of...

CORE-20020618: Vulnerabilities in Windows SMB (DoS)

CORE SECURITY TECHNOLOGIES http://www.corest.com Vulnerability report for Windows SMB DoS Date Published: 2002-08-22 Last Update: 2002-08-22 Advisory ID: CORE-20020618 Bugtraq ID: N/A CVE: CAN-2002-0724 CERT: VU311619, VU342243,VU250635 Title: Denial of Service Vulnerabilities in Windows SMB...

Moderate: Red Hat Security Advisory: : : : Updated util-linux package fixes password locking race

A locally exploitable vulnerability is present in the util-linux package which shipped with Red Hat Linux. Updated 8 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The util-linux package contains a large variety of low-level system utilities that are necessary for ...

[CORE-20020528] Multiple vulnerabilities in ToolTalk Database server

CORE SECURITY TECHNOLOGIES http://www.corest.com Multiple vulnerabilities in Tooltalk database server Date Published: 2002-07-10 Last Update: 2002-07-10 Advisory ID: CORE-20020528 Bugtraq ID: 5082,5083 CVE: CAN-2002-0677, CAN-2002-0678 CERT: VU975403 VU299816 Title: Multiple vulnerabilities in...

CORE-20020409: Multiple vulnerabilities in stack smashing protection technologies

CORE SECURITY TECHNOLOGIES Advisory http://www.corest.com Multiple vulnerabilities in stack smashing protection technologies Date Published: 2002-04-23 Last Update: 2002-04-23 Advisory ID: CORE-20020409 Bugtraq ID: Non-assigned yet CVE CAN: Non-assigned yet Title: Multiple vulnerabilities in stac...