Code injection

Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...

PT-2009-2915 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue allows attackers to execute arbitrary code through various means, including inserting CD-ROM or DVD media, connecting a USB or Firewire device, mapping a network drive, ...

RHEL 5 : kernel (RHSA-2009:0225)

Updated kernel packages that fix three security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the third regular update. This update has been rated as having importa...

No routing password permissions when the Dove on-line method-vulnerability warning-the black bar safety net

No routing password permissions when the pigeons on the line method: The first step:tools--FTP--FTP home directory, just in the desktop build one, put the following ports into 2 1. The user name can not fill. The following two options are marked with a tick. Then turn on the service. Completed th...

kernel: hfsplus: check read_mapping_page() return value

The hfsplusblockallocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the readmappingpage function before calling kmap, which allows attackers to cause a denial of service system crash via a crafted hfsplus filesystem image...

kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

BreakPoint Software Hex Workshop Denial of Service vulnerability

Hex Workshop is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

Hex Workshop 5.1.4 Local Buffer Overflow

Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor Mapping And See What Happen ^^ I...

CVE-2008-5756

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

Buffer overflow

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

CVE-2008-5756

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

No description provided by source. Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor...

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow PoC Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow PoC ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer...

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)

Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor Mapping And See What Happen ^^ I...

kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

DEBIAN-CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

CVE-2008-5398

CVE-2008-5398 affects Tor up to version before 0.2.0.32, where the ClientDNSRejectInternalAddresses option is not consistently enforced when an exit relay issues a policy-based stream refusal. This can allow remote exit relays to map an internal IP address to the destination hostname of the refus...