CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...

CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...

irssi -- multiple vulnerabilities

Two vulnerabilities have found in irssi. The first issue could allow man-in-the-middle attacks due to a missing comparison of SSL server hostnames and the certificate domain names e.g. CN. A second vulnerability, related to the nick matching code, could be triggered by remote attackers in order t...

sudo -- Privilege escalation with sudoedit

Todd Miller reports: Sudo's command matching routine expects actual commands to include one or more slash '/' characters. The flaw is that sudo's path resolution code did not add a "./" prefix to commands found in the current working directory. This creates an ambiguity between a "sudoedit" comma...

Flirt Matching SMS System SQL Injection

----------------------------Information------------------------------------------------ +Name : Flirt Matching SMS System = SQL Injection Exploit +Autor : Easy Laster +Date : 26.03.2010 +Script : Flirt Matching SMS System +Download : ------------------ +Demo : http://phpspezial.de/singel/ +Price ...

Flirt Matching SMS System <= SQL Injection Exploit

Exploit for php platform in category web applications ================================================== Flirt Matching SMS System = SQL Injection Exploit ================================================== ----------------------------Information------------------------------------------------ +Na...

Flirt Matching Sms System - SQL Injection

----------------------------Information------------------------------------------------ +Name : Flirt Matching SMS System = SQL Injection Exploit +Autor : Easy Laster +Date : 26.03.2010 +Script : Flirt Matching SMS System +Download : ------------------ +Demo : http://phpspezial.de/singel/ +Price ...

DEBIAN-CVE-2010-0426

sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by...

sudo -- Privilege escalation with sudoedit

Todd Miller reports: When sudo performs its command matching, there is a special case for pseudo-commands in the sudoers file currently, the only pseudo-command is sudoedit. Unlike a regular command, pseudo-commands do not begin with a slash '/'. The flaw is that sudo's the matching code would on...

[SECURITY] Fedora 12 Update: stardict-3.0.1-20.fc12

StarDict is a Cross-Platform and international dictionary written in Gtk2. It has powerful features such as "Glob-style pattern matching," "Scan selection word," "Fuzzy query," etc...

[SECURITY] Fedora 11 Update: wget-1.12-2.fc11

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

[SECURITY] Fedora 11 Update: snort-2.8.5.1-1.fc11

Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows,...

[SECURITY] Fedora 10 Update: snort-2.8.5.1-1.fc10

Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows,...

*.com accepted as wildcard match in SSL/TLS name matching

Certificate authorities are expected to vet all certificate registrations, but may fail to prevent fraudulent or erroneous registrations. Certificates which use a wild card immediately before the top level domain, or nulls in the domain name, may pass validation checks in Opera. Sites using such...

http-enum NSE Script

Enumerates directories used by popular web applications and servers. This parses a fingerprint file that's similar in format to the Nikto Web application scanner. This script, however, takes it one step further by building in advanced pattern matching as well as having the ability to identify...

Authentication flaw

Plesk 8.6.0, when short mail login names SHORTNAMES are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with 1 a base64-encoded username that begins with a valid shortname, or 2 a username that matches a valid password, as demonstrated using a SMTP and...

Fedora Core 11 FEDORA-2009-7435 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7435. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

metasploit vulnerability scanner-vulnerability warning-the black bar safety net

msf load dbsqlite3 Successfully loaded plugin: dbsqlite3 Next we will use the dbcreate command to initialize a new SQLite3 database and connect it to the Metasploit Framework instance: msf dbcreate The specified database already exists, connecting Successfully connected to the database File:...

[SECURITY] Fedora 11 Update: mutt-1.5.19-5.fc11

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

Mandriva Update for drakx-net MDKA-2007:091 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDKA-2007:091 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...