646 matches found
samba -- nss_info plugin privilege escalation vulnerability
The Samba development team reports: The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the "winbind nss info" smb.conf...
MDKA-2006:065 : hal
A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...
MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability
Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...
CVE-2006-3643
Cross-site scripting XSS vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console MMC library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect...
CVE-2006-3643
CVE-2006-3643 describes a remote code execution vulnerability in Microsoft Management Console (MMC) exposed via HTML in the MMC library. It affects Windows 2000 SP4 (and related MMC/IE configurations) where HTML-embedded MMC resources can be accessed from the Internet/Intranet zones, allowing rem...