apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

The red and black. WinRAR crack“disk encryption”(figure)-vulnerability warning-the black bar safety net

Early in the morning, I open OfficePC, suddenly dumbfounded. In addition to the C drive of the other disk in all the folders and files are all gone, each disk, leaving only a“disk encryption”and a“technical support”of the text of the documentFigure 1. But the author never used the“disk...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Solaris 5.10 (x86) : 137180-12

Service Provisioning System 6.0x86: Master Server Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ...

CVE-2008-6556

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

Command injection

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command...

CVE-2008-6557

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command...

CVE-2008-6555

CVE-2008-6555 affects the WebUtil component in The Puppet Master, specifically the cgi-bin/webutil.pl script. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command, enabling full compromise of affected systems reachable over the networ...

CVE-2008-6555

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command...

CVE-2008-6557

CVE-2008-6557 describes a remote command execution vulnerability in The Puppet Master WebUtil 2.7, caused by shell metacharacters in the details command processed by cgi-bin/webutil.pl. Affected component: WebUtil 2.7; root cause: unsafe handling of shell metacharacters allowing arbitrary command...

CVE-2008-6556

CVE-2008-6556 affects The Puppet Master WebUtil 2.3 via cgi-bin/webutil.pl . The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the whois parameter. The root cause is improper handling of user-supplied input in the whois command, enabling ...

CVE-2009-0923

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

Shoutcast server buffer overflow

Buffer overflow in DNAS Relay service on master server reply parsing...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

Design/Logic Flaw

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

CVE-2008-5419

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...